StackRadar

CVE-2026-12590

Low

Advisory

Published 20 Jul 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
515
of 17,787 indexed, latest versions
Container images
522
deployed by those charts
Fix available
1 of 1
affected package

body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement

Carried by container images the latest versions of 515 of 17,787 indexed charts deploy, on 522 images.

Affected packageAffected versionsFixed inImages
body-parsernpm1.13.3, 1.14.2, 1.16.1, 1.17.2+15 more1.20.6, 2.3.0522
OSV records
GHSA-v422-hmwv-36x6

Charts affected

515 by stars
ChartLatestAffected imagesRadar Score
hedgedocvista0.1.11 of 1See more

hedgedoc vista 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
body-parser@1.20.0
1.20.6

Open the chart page →

3,118
vote-appvote-appVerified publisher1.0.71 of 6See more

vote-app vote-app 1.0.7

1 of the 6 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
thecloudspark/app-result:1.09a5302cb8312
body-parser@1.20.2
1.20.6

Open the chart page →

3,031
resultappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

resultapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
body-parser@1.20.1
1.20.6

Open the chart page →

1,263
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
body-parser@1.20.1
1.20.6

Open the chart page →

8,262
resultappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

resultapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
body-parser@1.20.1
1.20.6

Open the chart page →

1,263
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
body-parser@1.20.1
1.20.6

Open the chart page →

8,262
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
body-parser@1.20.3
1.20.6

Open the chart page →

5,984
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.14.491c8d793746f
body-parser@2.2.0
2.3.0

Open the chart page →

5,484
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
body-parser@1.19.0
1.20.6

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
body-parser@1.19.0
1.20.6

Open the chart page →

28,605
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
body-parser@1.20.5
1.20.6

Open the chart page →

5,459
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
body-parser@1.20.2
1.20.6

Open the chart page →

14,100
workadventureworkadventure1.1.02 of 9See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
body-parser@1.20.1
1.20.6
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
body-parser@1.20.1
1.20.6

Open the chart page →

16,083
skoonerxdVerified publisher1.1.01 of 1See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
ymuski/skooner:latest67819ca511b5
body-parser@1.19.0
1.20.6

Open the chart page →

1,752
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-12590.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
body-parser@1.19.0
1.20.6

Open the chart page →

3,118

Container images carrying it

522 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
pawelmalak/flame:multiarch2.3.19f88b17692a0
body-parser@1.20.1
1.20.6
1
penpotapp/mcp:2.17.284f3f07ead11
body-parser@2.2.2
2.3.0
1
phntom/codimd:2.4.31b9aafbb62e6
body-parser@1.19.0
1.20.6
1
phpdockerio/readability-js-server:1.8.0ea8354b42600
body-parser@2.2.2
2.3.0
1
polonel/trudesk:1.2.60cf6513f6fe3
body-parser@1.20.0
1.20.6
1
promasu/cryptpad:v4.14.1-nginx51d1142b9f95
body-parser@1.18.3
1.20.6
1
pumejlab/nodejs-webapp:latestf563eabcb819
body-parser@1.20.1
1.20.6
1
punkerside/noroot:v0.0.7be20c81d6ca1
body-parser@1.20.0
1.20.6
1
pysga1996/python-redis-web:latestfdeec30ad482
body-parser@1.19.0
1.20.6
1
rakii8585/angular-node-webapp:latest026082a515ac
body-parser@1.19.0
1.20.6
1
redis/redisinsight:2.68019fcf774631
body-parser@1.20.3
1.20.6
1
redis/redisinsight:3.2.055542a762210
body-parser@2.2.1
2.3.0
1
redis/redisinsight:2.46699d341bd329
body-parser@1.20.2
1.20.6
1
redis/redisinsight:3.485562d67a912
body-parser@2.2.1
2.3.0
1
requarks/wiki:canary-2.5.2438b5865a7386c
body-parser@1.19.0
1.20.6
1
roadiehq/community-backstage-image:latestef355bf5b639
body-parser@1.19.0
1.20.6
1
robotshop/rs-cart:latest388349d5cb3c
body-parser@1.19.0
1.20.6
1
robotshop/rs-catalogue:latestd545747c1b97
body-parser@1.19.0
1.20.6
1
robotshop/rs-user:latestea509182c180
body-parser@1.19.0
1.20.6
1
rocketadmin/rocketadmin:1.17.710955ef540b9
body-parser@2.2.2
2.3.0
1
rocketchat/account-service:8.6.144af8ac4e711
body-parser@1.20.5
1.20.6
1
rocketchat/authorization-service:8.6.16bc18fb5d0e5
body-parser@1.20.5
1.20.6
1
rocketchat/ddp-streamer-service:8.6.1819771c4abe4
body-parser@1.20.5
1.20.6
1
rocketchat/presence-service:8.6.1c1170bdfe797
body-parser@1.20.5
1.20.6
1
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
body-parser@1.20.2
1.20.6
1
samajh/alprbackend:latestea742b4372ad
body-parser@1.20.0
1.20.6
1
samajh/alprfrontend:latest05ef4fddbb75
body-parser@1.20.0
1.20.6
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
body-parser@1.20.1
1.20.6
1
shahanafarooqui/rtl:0.11.0d0cd3d868aca
body-parser@1.19.0
1.20.6
1
shinobisystems/shinobi:dev3ca746937856
body-parser@1.19.0
1.20.6
1
shinobisystems/shinobi:latestc2f5ce2e1067
body-parser@1.19.0
1.20.6
1
shyamkrishna21/cloudvault:latestaf2785f5bb71
body-parser@1.20.4
1.20.6
1
shyamkrishna21/shopsync:latest3998b83def53
body-parser@1.20.4
1.20.6
1
sigp/siren:v3.0.42c219b04758e
body-parser@1.20.3
1.20.6
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
body-parser@1.19.0
1.20.6
1
skylenet/ethstats-server:pow-latestd757cc016198
body-parser@1.20.0
1.20.6
1
slagattollas/server-practica:latest6dd8ead8e2b1
body-parser@1.19.0
1.20.6
1
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
body-parser@1.16.1
1.20.6
1
socialmediamacroscope/smile_server:0.3.31a528c794270
body-parser@1.18.3
1.20.6
1
soulou2019/node-server:latest5e6ecfcc109e
body-parser@1.20.1
1.20.6
1
speckle/speckle-monitor-deployment:2.25.10-branch.testing6.645-b125c1e2dbc553ed87c
body-parser@1.20.3
1.20.6
1
speckle/speckle-monitor-deployment:2.26.3d51e1b0cf231
body-parser@1.20.3
1.20.6
1
speckle/speckle-preview-service:2.26.3092384dba45d
body-parser@1.20.3
1.20.6
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
body-parser@1.20.2
1.20.6
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
body-parser@1.20.3
1.20.6
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
body-parser@1.20.3
1.20.6
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
body-parser@1.20.3
1.20.6
1
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
body-parser@1.19.2
1.20.6
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
body-parser@1.20.2
1.20.6
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
body-parser@1.20.2
1.20.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.