CVE-2026-22787

High

Advisory

Published 14 Jan 2026In the index since 8 Sept 2026

html2pdf.js contains a cross-site scripting vulnerability

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
html2pdf.jsnpm	0.10.1, 0.10.3	0.14.0	2

2 by stars

Chart

Latest

Affected images

Radar Score

recipesgeek-cookbook

1 of the 2 container images this version deploys carry CVE-2026-22787.

Container image	Digest	Package	Fixed in
vabene1111/recipes :1.0.5.2	ec4e9e2905b0	html2pdf.js@0.10.1	0.14.0

7,801

1 of the 2 container images this version deploys carry CVE-2026-22787.

Container image	Digest	Package	Fixed in
flanksource/canary-checker-ui :v1.4.281	764c84e550db	html2pdf.js@0.10.3	0.14.0

4,650

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
flanksource/canary-checker-ui :v1.4.281	764c84e550db	html2pdf.js@0.10.3	0.14.0	1
vabene1111/recipes :1.0.5.2	ec4e9e2905b0	html2pdf.js@0.10.1	0.14.0	1