StackRadar

CVE-2026-24001

High

Advisory

Published 14 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
576
of 17,781 indexed, latest versions
Container images
598
deployed by those charts
Fix available
1 of 2
affected packages

jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch

Carried by container images the latest versions of 576 of 17,781 indexed charts deploy, on 598 images.

Affected packageAffected versionsFixed inImages
node-diffdeb5.0.0~dfsg+~5.0.1-4no fix listed1
diffnpm1.0.0, 1.0.2, 1.3.2, 1.4.0+10 more3.5.1, 4.0.4, 5.2.2, 8.0.3598
OSV records
UBUNTU-CVE-2026-24001GHSA-73rr-hh4g-fpgx

Charts affected

576 by stars
ChartLatestAffected imagesRadar Score
altinnendata-apptumogroup0.1.141 of 1See more

altinnendata-app tumogroup 0.1.14

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
sondresjo/altinnendata-app:v1.8.011ead455b492
diff@5.2.0
5.2.2

Open the chart page →

1,833
nstuning-apptumogroup0.1.171 of 1See more

nstuning-app tumogroup 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
sondresjo/nstuning-app:v1.6.10ffca294f10ba
diff@5.2.0
5.2.2

Open the chart page →

1,842
excalidashunxwaresVerified publisher2026.2.51 of 2See more

excalidash unxwares 2026.2.5

1 of the 2 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.4.271273af713c91
diff@5.2.0
5.2.2

Open the chart page →

2,620
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
diff@5.2.0
5.2.2

Open the chart page →

5,228
uoappuoapp1.1.01 of 1See more

uoapp uoapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
okaforuchena/uo-docker:V1.0.0004e81250f48
diff@5.1.0
5.2.2

Open the chart page →

1,187
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
vcnngr/pnbackend:latesteaf44ad0ad1f
diff@5.2.0
5.2.2

Open the chart page →

4,768
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
diff@4.0.2
4.0.4

Open the chart page →

3,129
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
diff@5.1.0
5.2.2

Open the chart page →

2,789
skoonervhdirkVerified publisher0.1.41 of 1See more

skooner vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
diff@5.1.0
5.2.2

Open the chart page →

1,341
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
diff@5.1.0
5.2.2

Open the chart page →

9,347
hedgedocvista0.1.11 of 1See more

hedgedoc vista 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
diff@5.1.0
5.2.2

Open the chart page →

3,118
vote-appvote-appVerified publisher1.0.71 of 6See more

vote-app vote-app 1.0.7

1 of the 6 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
thecloudspark/app-result:1.09a5302cb8312
diff@5.2.0
5.2.2

Open the chart page →

3,031
resultappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

resultapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
diff@5.1.0
5.2.2

Open the chart page →

1,263
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
diff@5.1.0
5.2.2

Open the chart page →

8,262
resultappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

resultapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
diff@5.1.0
5.2.2

Open the chart page →

1,263
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
diff@5.1.0
5.2.2

Open the chart page →

8,262
websitewaldo-visionVerified publisher0.33.02 of 2See more

website waldo-vision 0.33.0

2 of the 2 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
ghcr.io/waldo-vision/migrate:v0.3.6ae31923312ed
diff@5.1.0
5.2.2
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
diff@5.1.0
5.2.2

Open the chart page →

3,474
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
diff@4.0.2
4.0.4

Open the chart page →

5,984
queryservice-gatewaywbstack0.2.01 of 1See more

queryservice-gateway wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
diff@5.0.0
5.2.2

Open the chart page →

2,559
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
diff@5.0.0
5.2.2

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
diff@5.0.0
5.2.2

Open the chart page →

28,605
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
diff@4.0.2
4.0.4

Open the chart page →

5,459
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
diff@5.2.0
5.2.2

Open the chart page →

14,100
workadventureworkadventure1.1.04 of 9See more

workadventure workadventure 1.1.0

4 of the 9 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
diff@5.1.0
5.2.2
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
diff@4.0.2
4.0.4
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
diff@4.0.2
4.0.4
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
diff@5.1.0
5.2.2

Open the chart page →

16,083
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
diff@5.1.0
5.2.2

Open the chart page →

1,589
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-24001.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
diff@5.0.0
5.2.2

Open the chart page →

3,118

Container images carrying it

598 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
factly/mande-web:0.34.1742355964b0e
diff@5.1.0
5.2.2
1
fallenbagel/jellyseerr:latest4538137bc5af
diff@4.0.2
4.0.4
1
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
diff@4.0.2
4.0.4
1
fanzynoodle/smeejas:0.0.15f9916c1a287
diff@5.0.0
5.2.2
1
felddy/foundryvtt:0.8.36c5d90b90349
diff@5.0.0
5.2.2
1
felddy/foundryvtt:12.343.06c5e3e9ffbb0
diff@5.2.0
5.2.2
1
felipecs8/conversor-temperatura:v1f945423be36d
diff@5.2.0
5.2.2
1
felipecs8/landing-page:v1db6d44e325a1
diff@7.0.0
8.0.3
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
diff@5.2.0
5.2.2
1
fiware/iotagent-json:3.1.0879b21a0d36d
diff@5.1.0
5.2.2
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
diff@5.2.0
5.2.2
1
flanksource/incident-manager-ui:v1.4.318891f21df54fb
diff@5.2.0
5.2.2
1
folioci/mod-graphql:latestf0655a6a08fd
diff@5.2.0
5.2.2
1
fonoster/routr-pgdata-migrations:2.13.6c7b1dba81eb3
diff@5.2.0
5.2.2
1
fosrl/pangolin:1.13.0c32ad797ab96
diff@8.0.2
8.0.3
1
frappe/frappe-socketio:v13.4.12095767a9e82
diff@5.0.0
5.2.2
1
gonzague/monopoly:latest70465995deea
diff@5.0.0
5.2.2
1
governify/collector-dynamic:v1.3.06d3d1a5b46a9
diff@4.0.2
4.0.4
1
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
diff@4.0.1
4.0.4
1
gristlabs/grist:0.7.96e71b1914a7e
diff@3.5.0
3.5.1
1
gtato/demo-multiclus-registrator:1.0.09a744588fab3
diff@5.0.0
5.2.2
1
gtato/demo-multiclus-registry:1.0.02df5174f3cfd
diff@5.0.0
5.2.2
1
hamid2021/nodejs-dockercli:latest429d99890c3c
diff@5.1.0
5.2.2
1
hansehe/graphql-gateway:1.0.458e09540afbc
diff@4.0.2
4.0.4
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
diff@5.1.0
5.2.2
1
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
diff@5.2.0
5.2.2
1
helga09/shoes_ukr:v1.1.17999bc8b77c0
diff@5.1.0
5.2.2
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
diff@5.1.0
5.2.2
1
heywood8/redisinsight:2.28.00bc9ab313d37
diff@5.1.0
5.2.2
1
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
diff@5.2.0
5.2.2
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
diff@5.0.0
5.2.2
1
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
diff@5.2.0
5.2.2
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
diff@5.2.0
5.2.2
1
hugohg34/server:0.0.2503e5d8960ff
diff@5.0.0
5.2.2
1
ianw/quickchart:v1.7.1dc49dd460c37
diff@3.5.0
3.5.1
1
ibarreche/cloud-front-ci:latestc8970ac1c8dc
diff@3.5.0
3.5.1
1
ibmcom/microclimate-portal:latested5505e5c7ec
diff@2.2.3
3.5.1
1
ilum/marquez-web:0.53.2716437a51a6c
diff@8.0.2
8.0.3
1
inseefrlab/shelly:cloudshell31f04ca7436b
diff@5.0.0
5.2.2
1
instill/console:0.68.54cd70e2df5c6
diff@5.2.0
5.2.2
1
instructure/kinesalite:latest34400d82f28f
diff@5.1.0
5.2.2
1
intelloop/atlas-cmms-frontend:v1.5.12409c2a00ab6
diff@5.1.0
5.2.2
1
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
diff@4.0.2
4.0.4
1
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
diff@5.1.0
5.2.2
1
jaedb/iris:latest048cfbf58d57
diff@5.2.0
5.2.2
1
jakowenko/double-take:1.6.0b858bac9e32a
diff@5.0.0
5.2.2
1
jedi132000/nextapp:latestdc2a81e92f23
diff@5.1.0
5.2.2
1
jesec/flood:4.7.03d1d0bec117a
diff@5.0.0
5.2.2
1
jesec/flood:4.6.060bd59cfb4eb
diff@5.0.0
5.2.2
1
jesec/rtorrent-flood:latestf0c894ec459e
diff@5.0.0
5.2.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.