StackRadar

CVE-2026-17495

Medium

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.004
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
237
of 17,957 indexed, latest versions
Container images
229
deployed by those charts
Fix available
1 of 1
affected package

moment vulnerable to Path Traversal via crafted non-string locale name

Carried by container images the latest versions of 237 of 17,957 indexed charts deploy, on 229 images.

Affected packageAffected versionsFixed inImages
momentnpm2.29.2, 2.29.3, 2.29.4, 2.30.12.31.0229
OSV records
GHSA-4p3w-j4w9-5jqw

Charts affected

237 by stars
ChartLatestAffected imagesRadar Score
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
moment@2.30.1
2.31.0

Open the chart page →

12,024
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
moment@2.29.4
2.31.0

Open the chart page →

90,830
ghostgroundhog2k0.212.141 of 1See more

ghost groundhog2k 0.212.14

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
library/ghost:6.65.090592b712b6b
moment@2.30.1
2.31.0

Open the chart page →

2,282
growthbookgrowthbook5.1.01 of 2See more

growthbook growthbook 5.1.0

1 of the 2 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
growthbook/growthbook:5.1.0c8a124f55dca
moment@2.29.4
2.31.0

Open the chart page →

545
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
library/kibana:7.17.3e2e2031c15be
moment@2.29.2
2.31.0

Open the chart page →

17,965
jupyterhub-outpostjupyter-jscVerified publisher2.4.11 of 1See more

jupyterhub-outpost jupyter-jsc 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
moment@2.30.1
2.31.0

Open the chart page →

1,840
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
moment@2.30.1
2.31.0

Open the chart page →

5,605
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
moment@2.30.1
2.31.0

Open the chart page →

5,379
plane-enterprisemakeplaneOfficialVerified publisher3.10.13 of 13See more

plane-enterprise makeplane 3.10.1

3 of the 13 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
makeplane/live-commercial:v3.3.0488a6684637c
moment@2.30.1
2.31.0
makeplane/silo-commercial:v3.3.027bf6bbf59bd
moment@2.30.1
2.31.0
makeplane/space-commercial:v3.3.03dba6a659fb9
moment@2.30.1
2.31.0

Open the chart page →

4,114
mend-renovate-enterprise-editionmend-renovateVerified publisher10.6.01 of 2See more

mend-renovate-enterprise-edition mend-renovate 10.6.0

1 of the 2 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
ghcr.io/mend/renovate-ee-server:15.6.087b77989f48d
moment@2.30.1
2.31.0

Open the chart page →

38,423
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
moment@2.30.1
2.31.0

Open the chart page →

3,070
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
growthbook/growthbook:latestcbf1bc59e9a9
moment@2.29.4
2.31.0

Open the chart page →

1,364
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
moment@2.30.1
2.31.0

Open the chart page →

7,918
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
moment@2.29.4
2.31.0

Open the chart page →

7,226
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
moment@2.30.1
2.31.0

Open the chart page →

3,207
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
speckle/speckle-server:2.26.379f14a2bf931
moment@2.29.4
2.31.0

Open the chart page →

11,459
switcher-apiswitcherapiOfficialVerified publisher1.3.52 of 3See more

switcher-api switcherapi 1.3.5

2 of the 3 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
trackerforce/switcher-api:latest28ee0c4e0b88
moment@2.30.1
2.31.0
trackerforce/switcher-resolver-node:latest67e2c261f7b4
moment@2.30.1
2.31.0

Open the chart page →

888
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
moment@2.30.1
2.31.0

Open the chart page →

4,129
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
moment@2.29.4
2.31.0

Open the chart page →

10,289
lhciadnoctemVerified publisher0.1.01 of 1See more

lhci adnoctem 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
moment@2.30.1
2.31.0

Open the chart page →

1,481
outlineadnoctemVerified publisher0.1.21 of 1See more

outline adnoctem 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
outlinewiki/outline:1.10.1832051f039b4
moment@2.30.1
2.31.0

Open the chart page →

1,678
cross-seedalekcVerified publisher7.19.01 of 1See more

cross-seed alekc 7.19.0

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.7a1fed512261f
moment@2.30.1
2.31.0

Open the chart page →

1,478
jellyseerralexmorbo-jellyseerrVerified publisher1.0.31 of 1See more

jellyseerr alexmorbo-jellyseerr 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
moment@2.30.1
2.31.0

Open the chart page →

3,559
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
moment@2.29.4
2.31.0

Open the chart page →

3,567
platform-uiappscodeVerified publisher2026.9.111 of 1See more

platform-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
ghcr.io/appscode/platform-ui:2.5.0c27cafe398c2
moment@2.30.1
2.31.0

Open the chart page →

660
audiobookshelfbdclark-helm-chartsVerified publisher0.1.41 of 1See more

audiobookshelf bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
moment@2.29.4
2.31.0

Open the chart page →

1,899
pangolinbdcode0.14.11 of 1See more

pangolin bdcode 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
fosrl/pangolin:latest00cfb631097a
moment@2.30.1
2.31.0

Open the chart page →

2,084
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
moment@2.29.4
2.31.0

Open the chart page →

4,777
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
moment@2.29.4
2.31.0

Open the chart page →

3,257
cross-seedcfi20176.13.61 of 1See more

cross-seed cfi2017 6.13.6

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
moment@2.30.1
2.31.0

Open the chart page →

1,461
qbittorrentcfi20176.13.31 of 1See more

qbittorrent cfi2017 6.13.3

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
moment@2.30.1
2.31.0

Open the chart page →

1,461
ghostchart-ghost0.1.61 of 2See more

ghost chart-ghost 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
library/ghost:6.65.0-alpine3.23fea3264f902e
moment@2.30.1
2.31.0

Open the chart page →

1,283
audiobookshelfcharts-derwitt-devVerified publisher1.1.21 of 1See more

audiobookshelf charts-derwitt-dev 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.37.06432d1dc5895
moment@2.29.4
2.31.0

Open the chart page →

1,403
audiobookshelfchristianhuthVerified publisher2.5.01 of 1See more

audiobookshelf christianhuth 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.37.06432d1dc5895
moment@2.29.4
2.31.0

Open the chart page →

1,403
countlychristianhuthVerified publisher5.3.22 of 3See more

countly christianhuth 5.3.2

2 of the 3 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
moment@2.30.1
2.31.0
countly/frontend:25.05.42acbc11499b6
moment@2.30.1
2.31.0

Open the chart page →

8,059
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
moment@2.30.1
2.31.0

Open the chart page →

14,240
cortezacorteza1.1.01 of 3See more

corteza corteza 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
moment@2.30.1
2.31.0

Open the chart page →

8,992
quickchartcowboysysopVerified publisher5.0.01 of 1See more

quickchart cowboysysop 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
ianw/quickchart:v1.7.1dc49dd460c37
moment@2.29.4
2.31.0

Open the chart page →

5,590
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.4.11787550d2358
moment@2.29.4
2.31.0

Open the chart page →

14,511
jupyterhubd4nVerified publisher3.3.72 of 7See more

jupyterhub d4n 3.3.7

2 of the 7 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
moment@2.29.4
2.31.0
aristidetm/k8s-hub:3.3.7ccb516cb8474
moment@2.30.1
2.31.0

Open the chart page →

17,520
decisionrules-aksdecisionrules-aksVerified publisher0.2.01 of 2See more

decisionrules-aks decisionrules-aks 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
moment@2.30.1
2.31.0

Open the chart page →

436
decisionrules-eksdecisionrules-eksVerified publisher0.3.01 of 2See more

decisionrules-eks decisionrules-eks 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
moment@2.30.1
2.31.0

Open the chart page →

436
decisionrules-ingressdecisionrules-ingressVerified publisher0.2.01 of 2See more

decisionrules-ingress decisionrules-ingress 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
moment@2.30.1
2.31.0

Open the chart page →

436
decisionrules-ocpdecisionrules-ocpVerified publisher0.1.01 of 4See more

decisionrules-ocp decisionrules-ocp 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
moment@2.30.1
2.31.0

Open the chart page →

1,881
backend-servicedev-krishan-dhaka-charts1.0.31 of 1See more

backend-service dev-krishan-dhaka-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
devkrishan001/backend:latestf1c3acadeabe
moment@2.30.1
2.31.0

Open the chart page →

1,366
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
moment@2.30.1
2.31.0

Open the chart page →

71,602
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
moment@2.30.1
2.31.0

Open the chart page →

71,602
node-reddjdl-charts0.33.01 of 1See more

node-red djdl-charts 0.33.0

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
nodered/node-red:latesta649dd711d55
moment@2.30.1
2.31.0

Open the chart page →

245
node-redegebackVerified publisher2.0.131 of 1See more

node-red egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
nodered/node-red:5.0.410f40d0a83e7
moment@2.30.1
2.31.0

Open the chart page →

1,185
azuriteemberstackVerified publisher1.0.211 of 1See more

azurite emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-17495.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-storage/azurite:latest830430c1da1a
moment@2.30.1
2.31.0

Open the chart page →

473

Container images carrying it

229 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
moment@2.29.4
2.31.0
1
fiware/idm:8.3.3a1b6ed4ae84f
moment@2.29.4
2.31.0
1
fiware/iotagent-json:3.1.0879b21a0d36d
moment@2.29.4
2.31.0
1
fosrl/pangolin:latest00cfb631097a
moment@2.30.1
2.31.0
1
fosrl/pangolin:1.13.0c32ad797ab96
moment@2.30.1
2.31.0
1
getwud/wud:8.1.1b1cd01c43839
moment@2.30.1
2.31.0
1
glenndehaan/contentbridge:latest99b9e4f73848
moment@2.29.4
2.31.0
1
growthbook/growthbook:5.1.0c8a124f55dca
moment@2.29.4
2.31.0
1
growthbook/growthbook:latestcbf1bc59e9a9
moment@2.29.4
2.31.0
1
heywood8/redisinsight:2.28.00bc9ab313d37
moment@2.29.4
2.31.0
1
hugohg34/server:0.0.2503e5d8960ff
moment@2.29.2
2.31.0
1
ianw/quickchart:v1.7.1dc49dd460c37
moment@2.29.4
2.31.0
1
infisical/infisical:latest:v0.165.602082bf13163
moment@2.30.1
2.31.0
1
infisical/infisical:latest3365445909be
moment@2.30.1
2.31.0
1
joplin/server:3.0-beta52af57880c0e
moment@2.30.1
2.31.0
1
jupyterhub/jupyterhub:5.4.63974ba945e65
moment@2.30.1
2.31.0
1
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
moment@2.29.4
2.31.0
1
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
moment@2.29.4
2.31.0
1
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
moment@2.30.1
2.31.0
1
kubebb/bff-server:v0.2.0-202312040fbb732379bc
moment@2.29.4
2.31.0
1
kubebb/component-store:latestfd8ecbd73213
moment@2.29.4
2.31.0
1
kubeflownotebookswg/centraldashboard:v1.6.137300551dea6
moment@2.29.2
2.31.0
1
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
moment@2.29.4
2.31.0
1
kubevious/backend:1.2.22d9ba6eb46b6
moment@2.29.4
2.31.0
1
kubevious/collector:1.2.1f58226f9d84e
moment@2.29.4
2.31.0
1
kubevious/guard:1.2.19bf567704de2
moment@2.29.4
2.31.0
1
kubevious/parser:1.0.151acf1a1f0b47
moment@2.29.4
2.31.0
1
kubevious/parser:1.2.299ae7a5168c2
moment@2.29.4
2.31.0
1
kubevious/workload-operator:1.0.20b0f4c507eb6
moment@2.29.4
2.31.0
1
kyso/kyso-front:lateste52595c5c16f
moment@2.29.4
2.31.0
1
library/ghost:6.37.01ef2e532ca4d
moment@2.30.1
2.31.0
1
library/ghost:6.25.12654b1e90413
moment@2.29.4
2.31.0
1
library/ghost:6.41.129773d6be407
moment@2.30.1
2.31.0
1
library/ghost:6.64.0586821cfebac
moment@2.30.1
2.31.0
1
library/ghost:6.39.0-alpine77196da4b0df
moment@2.30.1
2.31.0
1
library/ghost:6.65.0-alpine3.23fea3264f902e
moment@2.30.1
2.31.0
1
library/kibana:7.17.150172f1c538e7
moment@2.29.4
2.31.0
1
library/kibana:8.19.2235544f1ff28a
moment@2.30.1
2.31.0
1
library/kibana:7.17.8c5781ba340ef
moment@2.29.4
2.31.0
1
library/kibana:7.17.3e2e2031c15be
moment@2.29.2
2.31.0
1
library/mongo-express:1.0.2-20-alpine3.191aae00775251
moment@2.29.4
2.31.0
1
linuxserver/grocy:4.0.1f8f5f96b6ea8
moment@2.29.4
2.31.0
1
linuxserver/overseerr:1.35.06108ed066d4a
moment@2.29.4
2.31.0
1
luligu/matterbridge:3.0.28f97884bebc2
moment@2.30.1
2.31.0
1
makeplane/live-commercial:v3.3.0488a6684637c
moment@2.30.1
2.31.0
1
makeplane/silo-commercial:v3.3.027bf6bbf59bd
moment@2.30.1
2.31.0
1
makeplane/space-commercial:v3.3.03dba6a659fb9
moment@2.30.1
2.31.0
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
moment@2.29.4
2.31.0
1
mautic/mautic:7-apacheeb8cc73d97e1
moment@2.30.1
2.31.0
1
mitre/heimdall2:release-latest06f6e72d416a
moment@2.30.1
2.31.0
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.