StackRadar

CVE-2026-12590

Low

Advisory

Published 20 Jul 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
516
of 17,787 indexed, latest versions
Container images
523
deployed by those charts
Fix available
1 of 1
affected package

body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement

Carried by container images the latest versions of 516 of 17,787 indexed charts deploy, on 523 images.

Affected packageAffected versionsFixed inImages
body-parsernpm1.13.3, 1.14.2, 1.16.1, 1.17.2+15 more1.20.6, 2.3.0523
OSV records
GHSA-v422-hmwv-36x6

Charts affected

516 by stars
ChartLatestAffected imagesRadar Score
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
body-parser@2.2.0
2.3.0

Open the chart page →

—
hedgedocvista0.1.11 of 1See more

hedgedoc vista 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
body-parser@1.20.0
1.20.6

Open the chart page →

3,118
vote-appvote-appVerified publisher1.0.71 of 6See more

vote-app vote-app 1.0.7

1 of the 6 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
thecloudspark/app-result:1.09a5302cb8312
body-parser@1.20.2
1.20.6

Open the chart page →

3,031
resultappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

resultapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
body-parser@1.20.1
1.20.6

Open the chart page →

1,263
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
body-parser@1.20.1
1.20.6

Open the chart page →

8,262
resultappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

resultapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
body-parser@1.20.1
1.20.6

Open the chart page →

1,263
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
body-parser@1.20.1
1.20.6

Open the chart page →

8,262
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
body-parser@1.20.3
1.20.6

Open the chart page →

5,984
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.14.491c8d793746f
body-parser@2.2.0
2.3.0

Open the chart page →

5,484
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
body-parser@1.19.0
1.20.6

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
body-parser@1.19.0
1.20.6

Open the chart page →

28,605
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
body-parser@1.20.5
1.20.6

Open the chart page →

5,459
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
body-parser@1.20.2
1.20.6

Open the chart page →

14,100
workadventureworkadventure1.1.02 of 9See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
body-parser@1.20.1
1.20.6
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
body-parser@1.20.1
1.20.6

Open the chart page →

16,083
skoonerxdVerified publisher1.1.01 of 1See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
ymuski/skooner:latest67819ca511b5
body-parser@1.19.0
1.20.6

Open the chart page →

1,752
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
body-parser@1.19.0
1.20.6

Open the chart page →

3,118

Container images carrying it

523 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/fpsacha/zomboid-panel:v1.0.6605e16dd56cfb
body-parser@1.20.5
1.20.6
1
ghcr.io/hiteshnayak305/cors-proxy:1.2.0e6ff0a131556
body-parser@2.2.0
2.3.0
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
body-parser@1.20.1
1.20.6
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
body-parser@1.20.3
1.20.6
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
body-parser@2.2.0
2.3.0
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
body-parser@2.2.0
2.3.0
1
ghcr.io/jordan-dalby/bytestash:1.5.12eb4f736b8cd4
body-parser@1.20.5
1.20.6
1
ghcr.io/k10app/basicuserservice:latest2ee057ad3bef
body-parser@1.20.1
1.20.6
1
ghcr.io/k10app/catalog:latest639c980be0f1
body-parser@1.20.1
1.20.6
1
ghcr.io/k10app/order:lateste1017d0dbd78
body-parser@1.20.1
1.20.6
1
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
body-parser@2.2.0
2.3.0
1
ghcr.io/kubedb/mongo-gui:latestee0354b7a57a
body-parser@1.19.0
1.20.6
1
ghcr.io/leoquote/mergeable:latest451706815103
body-parser@1.19.0
1.20.6
1
ghcr.io/linuxserver/pairdrop:version-v1.11.23279d2d986c0
body-parser@1.20.3
1.20.6
1
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
body-parser@1.19.0
1.20.6
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
body-parser@1.19.0
1.20.6
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
body-parser@1.20.1
1.20.6
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
body-parser@1.20.3
1.20.6
1
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
body-parser@1.20.3
1.20.6
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
body-parser@1.19.0
1.20.6
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
body-parser@1.20.1
1.20.6
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
body-parser@1.20.3
1.20.6
1
ghcr.io/michaelhaigh/pacman:latestb0931b1f085d
body-parser@1.20.4
1.20.6
1
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
body-parser@1.20.2
1.20.6
1
ghcr.io/mmontes11/iot-biot:v3.11.033f7976b26a8
body-parser@1.20.2
1.20.6
1
ghcr.io/mmontes11/iot-thing:v3.11.0542e91e8499c
body-parser@1.20.1
1.20.6
1
ghcr.io/mrprimate/ddb-proxy:0.0.258dc2d7fb460f
body-parser@1.20.1
1.20.6
1
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
body-parser@2.2.2
2.3.0
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
body-parser@2.2.2
2.3.0
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
body-parser@1.20.2
1.20.6
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
body-parser@1.20.3
1.20.6
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
body-parser@1.20.1
1.20.6
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
body-parser@1.20.2
1.20.6
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
body-parser@1.19.0
1.20.6
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
body-parser@1.20.1
1.20.6
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
body-parser@1.20.2
1.20.6
1
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
body-parser@1.20.3
1.20.6
1
ghcr.io/shuguet/pacman:latesta0ec71732c3c
body-parser@1.20.4
1.20.6
1
ghcr.io/solucteam/outscale-s3-explorer:v1.0.09665c3e71889
body-parser@1.20.3
1.20.6
1
ghcr.io/talhajuikar/stateful-data-generator:v1.1.1dfd7ea7303a2
body-parser@1.20.3
1.20.6
1
ghcr.io/techno-tim/littlelink-server:latest735a1fcd078b
body-parser@1.20.2
1.20.6
1
ghcr.io/theconnman/docker-hub-rss:0.6.238eba84b2be8
body-parser@1.20.4
1.20.6
1
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
body-parser@1.20.1
1.20.6
1
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
body-parser@1.20.3
1.20.6
1
ghcr.io/wgbh-mla/dream-aapb:main288a4774aa90
body-parser@1.20.4
1.20.6
1
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
body-parser@1.20.3
1.20.6
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
body-parser@1.20.2
1.20.6
1
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
body-parser@2.2.0
2.3.0
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
body-parser@1.20.1
1.20.6
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
body-parser@1.20.1
1.20.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.