StackRadar

CVE-2026-24001

High

Advisory

Published 14 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
576
of 17,781 indexed, latest versions
Container images
598
deployed by those charts
Fix available
1 of 2
affected packages

jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch

Carried by container images the latest versions of 576 of 17,781 indexed charts deploy, on 598 images.

Affected packageAffected versionsFixed inImages
node-diffdeb5.0.0~dfsg+~5.0.1-4no fix listed1
diffnpm1.0.0, 1.0.2, 1.3.2, 1.4.0+10 more3.5.1, 4.0.4, 5.2.2, 8.0.3598
OSV records
UBUNTU-CVE-2026-24001GHSA-73rr-hh4g-fpgx

Charts affected

576 by stars
ChartLatestAffected imagesRadar Score
altinnendata-apptumogroup0.1.141 of 1See more

altinnendata-app tumogroup 0.1.14

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
sondresjo/altinnendata-app:v1.8.011ead455b492
diff@5.2.0
5.2.2

Open the chart page →

1,833
nstuning-apptumogroup0.1.171 of 1See more

nstuning-app tumogroup 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
sondresjo/nstuning-app:v1.6.10ffca294f10ba
diff@5.2.0
5.2.2

Open the chart page →

1,842
excalidashunxwaresVerified publisher2026.2.51 of 2See more

excalidash unxwares 2026.2.5

1 of the 2 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.4.271273af713c91
diff@5.2.0
5.2.2

Open the chart page →

2,620
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
diff@5.2.0
5.2.2

Open the chart page →

5,228
uoappuoapp1.1.01 of 1See more

uoapp uoapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
okaforuchena/uo-docker:V1.0.0004e81250f48
diff@5.1.0
5.2.2

Open the chart page →

1,187
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
vcnngr/pnbackend:latesteaf44ad0ad1f
diff@5.2.0
5.2.2

Open the chart page →

4,768
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
diff@4.0.2
4.0.4

Open the chart page →

3,129
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
diff@5.1.0
5.2.2

Open the chart page →

2,789
skoonervhdirkVerified publisher0.1.41 of 1See more

skooner vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
diff@5.1.0
5.2.2

Open the chart page →

1,341
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
diff@5.1.0
5.2.2

Open the chart page →

9,347
hedgedocvista0.1.11 of 1See more

hedgedoc vista 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
diff@5.1.0
5.2.2

Open the chart page →

3,118
vote-appvote-appVerified publisher1.0.71 of 6See more

vote-app vote-app 1.0.7

1 of the 6 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
thecloudspark/app-result:1.09a5302cb8312
diff@5.2.0
5.2.2

Open the chart page →

3,031
resultappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

resultapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
diff@5.1.0
5.2.2

Open the chart page →

1,263
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
diff@5.1.0
5.2.2

Open the chart page →

8,262
resultappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

resultapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
diff@5.1.0
5.2.2

Open the chart page →

1,263
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
diff@5.1.0
5.2.2

Open the chart page →

8,262
websitewaldo-visionVerified publisher0.33.02 of 2See more

website waldo-vision 0.33.0

2 of the 2 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
ghcr.io/waldo-vision/migrate:v0.3.6ae31923312ed
diff@5.1.0
5.2.2
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
diff@5.1.0
5.2.2

Open the chart page →

3,474
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
diff@4.0.2
4.0.4

Open the chart page →

5,984
queryservice-gatewaywbstack0.2.01 of 1See more

queryservice-gateway wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
diff@5.0.0
5.2.2

Open the chart page →

2,559
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
diff@5.0.0
5.2.2

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
diff@5.0.0
5.2.2

Open the chart page →

28,605
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
diff@4.0.2
4.0.4

Open the chart page →

5,459
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
diff@5.2.0
5.2.2

Open the chart page →

14,100
workadventureworkadventure1.1.04 of 9See more

workadventure workadventure 1.1.0

4 of the 9 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
diff@5.1.0
5.2.2
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
diff@4.0.2
4.0.4
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
diff@4.0.2
4.0.4
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
diff@5.1.0
5.2.2

Open the chart page →

16,083
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
diff@5.1.0
5.2.2

Open the chart page →

1,589
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
diff@5.0.0
5.2.2

Open the chart page →

3,118

Container images carrying it

598 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
outlinewiki/outline:0.69.1d060dcd8f9aa
diff@5.1.0
5.2.2
2
rajnandan1/kener:3.2.1930407afca731
diff@5.2.0
5.2.2
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
diff@5.1.0
5.2.2
2
requarks/wiki:2:latest68f0d1848261
diff@4.0.2
4.0.4
2
shahanafarooqui/rtl:0.13.3e2195188a451
diff@5.1.0
5.2.2
2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
diff@5.1.0
5.2.2
2
statsd/statsd:v0.8.6dab129e74c25
diff@4.0.2
4.0.4
2
sysnet4admin/dashboard:bluec5bd3bb1b5a6
diff@5.2.0
5.2.2
2
taigaio/taiga-events:latest92fc0822564f
diff@5.1.0
5.2.2
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
diff@5.0.0
5.2.2
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
diff@5.2.0
5.2.2
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
diff@5.1.0
5.2.2
2
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
diff@5.2.0
5.2.2
2
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
diff@5.0.0
5.2.2
2
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
diff@5.2.0
5.2.2
2
ghcr.io/techno-tim/littlelink-server:lateste84ea9d93b60
diff@5.1.0
5.2.2
2
ghcr.io/wg-easy/wg-easy:145f26407fd2ed
diff@5.2.0
5.2.2
2
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
diff@5.1.0
5.2.2
2
0hlov3/semaphore:v1.0.050f874ec096b
diff@5.1.0
5.2.2
1
activepieces/activepieces:0.23.0c26188b44e62
diff@4.0.2
4.0.4
1
actualbudget/actual-server:25.3.158fecd9088b7
diff@5.2.0
5.2.2
1
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
diff@5.2.0
5.2.2
1
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
diff@5.2.0
5.2.2
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
diff@4.0.2
4.0.4
1
alazidis/stornx:1.1.1602d4f7f090c
diff@4.0.2
4.0.4
1
alquimiaai/studio:certification38a1f0341982
diff@5.2.0
5.2.2
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
diff@4.0.1
4.0.4
1
anamskenneth/recipe_backend:2025-06-079b7d2cd389b7
diff@4.0.2
4.0.4
1
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
diff@5.2.0
5.2.2
1
anoopnair/lifecycle-jira-integration:latestd80c73a6089d
diff@5.0.0
5.2.2
1
aolde/bredbandskollen-prometheus-exporter:1.0.2dc61ee713720
diff@5.0.0
5.2.2
1
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
diff@5.2.0
5.2.2
1
apimap/developer:v1.3.1406d3858e20c
diff@5.1.0
5.2.2
1
apimap/portal:v2.4.0041a4790c65c
diff@5.1.0
5.2.2
1
arturisimo/server-urjc:v1.0d8dc4430531e
diff@5.0.0
5.2.2
1
assistiot/composite-services-manager_agent-http-mqtt:latest16d21bc5e42e
diff@5.1.0
5.2.2
1
assistiot/composite-services-manager_agent-mqtt-http:latest27d58b8911cd
diff@5.1.0
5.2.2
1
assistiot/dlt_api:2.1.0c8a170683be7
diff@5.1.0
5.2.2
1
assistiot/multi-link_client:latestcf048365d042
diff@5.1.0
5.2.2
1
assistiot/multi-link_server:latestf38c76a4c960
diff@5.1.0
5.2.2
1
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
diff@4.0.2
4.0.4
1
assistiot/smart-orchestrator_enabler:latest89f37e88c871
diff@4.0.2
4.0.4
1
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
diff@4.0.2
4.0.4
1
automatischio/automatisch:0.15.03bace7a12d5f
diff@5.2.0
5.2.2
1
baserow/baserow:1.30.1df0c42eb67e8
diff@5.2.0
5.2.2
1
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
diff@1.0.2
3.5.1
1
belirta/beli-docker:v1.0.0f65ad0e23b4d
diff@5.1.0
5.2.2
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
diff@5.2.0
5.2.2
1
bicarus/http-https-echo:2785dd6a7e805e
diff@5.1.0
5.2.2
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
diff@5.0.0
5.2.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.