StackRadar

CVE-2026-27904

High

Advisory

Published 26 Feb 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
39th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
799
of 17,787 indexed, latest versions
Container images
842
deployed by those charts
Fix available
1 of 2
affected packages

minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions

Carried by container images the latest versions of 799 of 17,787 indexed charts deploy, on 842 images.

Affected packageAffected versionsFixed inImages
minimatchnpm0.3.0, 1.0.0, 2.0.10, 3.0.0+22 more3.1.4, 4.2.5, 5.1.8, 6.2.2+2 more842
node-minimatchdeb1.0.0-1, 3.0.4-3, 3.0.4-3+deb10u1build0.18.04.1, 3.0.4-4+3 moreno fix listed8
OSV records
DEBIAN-CVE-2026-27904GHSA-23c5-xmqv-rm74UBUNTU-CVE-2026-27904

Charts affected

799 by stars
ChartLatestAffected imagesRadar Score
angular-node-chartangular-webapp2.0.01 of 1See more

angular-node-chart angular-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
rakii8585/angular-node-webapp:latest026082a515ac
minimatch@3.0.4
3.1.4

Open the chart page →

2,616
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
minimatch@9.0.5
9.0.7

Open the chart page →

5,516
lametric-nightscout-proxyaolde0.1.01 of 1See more

lametric-nightscout-proxy aolde 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
ghcr.io/aolde/lametric-nightscout-proxy:latest7d1951b6baf5
minimatch@3.1.2
3.1.4

Open the chart page →

1,186
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
minimatch@3.1.2
3.1.4

Open the chart page →

2,353
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
minimatch@5.1.0
5.1.8

Open the chart page →

2,396
d.vazquezm.2021_helmapphelmVerified publisher1.0.02 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

2 of the 6 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-external-service:1.0.02a68e9ac7f09
minimatch@3.0.4
3.1.4
davidvmar/urjc-davidvmar-server:1.0.05663f5b24615
minimatch@3.0.4
3.1.4

Open the chart page →

19,784
app-movies-seriesapp-movies-seriesVerified publisher0.1.01 of 2See more

app-movies-series app-movies-series 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
felipecs8/app-movies-series:v14e51693fcdf5
minimatch@3.1.2
3.1.4

Open the chart page →

3,166
mongo-uiappscodeVerified publisher2026.3.301 of 1See more

mongo-ui appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
ghcr.io/kubedb/mongo-gui:latestee0354b7a57a
minimatch@3.1.2
3.1.4

Open the chart page →

912
trifidappuio2.0.21 of 1See more

trifid appuio 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
zazuko/trifid:2.3.7054be137de70
minimatch@3.0.4
3.1.4

Open the chart page →

2,784
argonix-apiargonix0.2.31 of 4See more

argonix-api argonix 0.2.3

1 of the 4 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api-frontend:1.0.0d041bbf2814f
minimatch@9.0.5
9.0.7

Open the chart page →

4,819
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
minimatch@3.1.2
3.1.4

Open the chart page →

23,407
agenthttpmqttassist-iot-composite-services1.0.01 of 1See more

agenthttpmqtt assist-iot-composite-services 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
assistiot/composite-services-manager_agent-http-mqtt:latest16d21bc5e42e
minimatch@5.1.0
5.1.8

Open the chart page →

1,158
agentmqtthttpassist-iot-composite-services1.0.01 of 1See more

agentmqtthttp assist-iot-composite-services 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
assistiot/composite-services-manager_agent-mqtt-http:latest27d58b8911cd
minimatch@3.1.2
3.1.4

Open the chart page →

1,158
dltkvassist-iot-data-integrity-verification0.2.03 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.0.0e36a8922fa0c
minimatch@5.1.0
5.1.8
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
minimatch@3.0.4
3.1.4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
minimatch@3.0.4
3.1.4

Open the chart page →

77,821
dltflassist-iot-dlt-based-fl0.2.03 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.1.0c8a170683be7
minimatch@3.1.2
3.1.4
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
minimatch@3.0.4
3.1.4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
minimatch@3.0.4
3.1.4

Open the chart page →

77,821
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:api-latest7473d77448e1
minimatch@3.1.2
3.1.4

Open the chart page →

9,407
monitoring-notifyingassist-iot-monitoring-notifying0.1.01 of 1See more

monitoring-notifying assist-iot-monitoring-notifying 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
assistiot/monitoring_notifying:2.0.068324d0fa5bb
minimatch@3.1.2
3.1.4

Open the chart page →

1,677
multilink-clientassist-iot-multi-link-client-app1.0.01 of 2See more

multilink-client assist-iot-multi-link-client-app 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
assistiot/multi-link_client:latestcf048365d042
minimatch@3.1.2
3.1.4

Open the chart page →

1,446
multilink-serverassist-iot-multi-link-server-app1.0.01 of 2See more

multilink-server assist-iot-multi-link-server-app 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
assistiot/multi-link_server:latestf38c76a4c960
minimatch@3.1.2
3.1.4

Open the chart page →

973
openapiassist-iot-open-api-management0.2.22 of 6See more

openapi assist-iot-open-api-management 0.2.2

2 of the 6 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
minimatch@3.1.2
3.1.4
pantsel/konga:latestc8172b75607d
minimatch@2.0.10
3.1.4

Open the chart page →

18,331
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
minimatch@3.1.2
3.1.4
assistiot/smart-orchestrator_enabler:latest89f37e88c871
minimatch@3.1.2
3.1.4
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
minimatch@3.1.2
3.1.4

Open the chart page →

42,460
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
minimatch@9.0.5
9.0.7

Open the chart page →

31,807
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
minimatch@9.0.3
9.0.7

Open the chart page →

8,555
shynetatrox0.1.11 of 1See more

shynet atrox 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.12.0e821e31140f7
minimatch@3.0.4
3.1.4

Open the chart page →

5,507
nas-appsawesomeVerified publisher2.0.02 of 8See more

nas-apps awesome 2.0.0

2 of the 8 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
ltdstudio/terraforming-mars:latest0e76c6f4eac0
minimatch@3.0.4
3.1.4
wettyoss/wetty:latest7423b3d40ba2
minimatch@9.0.5
9.0.7

Open the chart page →

7,166
awesomeblessingappawesomeblessingapp1.1.01 of 1See more

awesomeblessingapp awesomeblessingapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
bnwokoye/nodejswebapp:latest74de7dc7ebfb
minimatch@3.1.2
3.1.4

Open the chart page →

1,267
bookinfobasictechno0.1.01 of 6See more

bookinfo basictechno 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
istio/examples-bookinfo-ratings-v1:1.17.0b6a6b88d3578
minimatch@3.0.4
3.1.4

Open the chart page →

20,785
audiobookshelfbdclark-helm-chartsVerified publisher0.1.41 of 1See more

audiobookshelf bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
minimatch@3.1.2
3.1.4

Open the chart page →

1,722
bluesky-pdsbear0.4.2081 of 1See more

bluesky-pds bear 0.4.208

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
minimatch@9.0.5
9.0.7

Open the chart page →

2,137
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
minimatch@3.0.4
3.1.4

Open the chart page →

5,807
myhelmappbelihelmapp1.1.01 of 1See more

myhelmapp belihelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
belirta/beli-docker:v1.0.0f65ad0e23b4d
minimatch@3.1.2
3.1.4

Open the chart page →

1,187
http-debugbicarus-labs0.1.01 of 1See more

http-debug bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
bicarus/http-https-echo:2785dd6a7e805e
minimatch@3.1.2
3.1.4

Open the chart page →

867
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
minimatch@3.1.2
3.1.4

Open the chart page →

4,455
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
minimatch@3.0.4
3.1.4

Open the chart page →

22,916
bluerange-mosquittobluerangeOfficialVerified publisher1.0.41 of 1See more

bluerange-mosquitto bluerange 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
bluerange/bluerange-mosquitto:25f1bfbba84832
minimatch@9.0.5
9.0.7

Open the chart page →

1,168
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
istio/examples-bookinfo-ratings-v1:1.15.009b9d6958a13
minimatch@3.0.4
3.1.4

Open the chart page →

18,998
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
minimatch@5.1.6
5.1.8
sysnet4admin/colosseum-prm:log5802bfcd7fed
minimatch@3.1.2
3.1.4

Open the chart page →

26,266
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
minimatch@3.1.2
3.1.4

Open the chart page →

3,072
registry-uibryanalves0.2.01 of 1See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
konradkleine/docker-registry-frontend:v2181aad54ee64
minimatch@2.0.10
3.1.4

Open the chart page →

4,069
rtorrent-floodbryanalves0.5.01 of 1See more

rtorrent-flood bryanalves 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
jesec/flood:4.7.03d1d0bec117a
minimatch@3.0.4
3.1.4

Open the chart page →

1,477
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
minimatch@9.0.5
9.0.7

Open the chart page →

14,446
openmctbryopsida0.1.11 of 1See more

openmct bryopsida 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/openmct:main38b6a50a62b2
minimatch@3.1.2
3.1.4

Open the chart page →

951
syslog-portalbryopsida0.3.11 of 1See more

syslog-portal bryopsida 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/syslog-portal:main3947bfd04f49
minimatch@3.1.2
3.1.4

Open the chart page →

1,306
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
minimatch@9.0.5
9.0.7

Open the chart page →

13,363
cross-seedcfi20176.13.61 of 1See more

cross-seed cfi2017 6.13.6

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
minimatch@9.0.5
9.0.7

Open the chart page →

1,339
qbittorrentcfi20176.13.31 of 1See more

qbittorrent cfi2017 6.13.3

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
minimatch@9.0.5
9.0.7

Open the chart page →

1,339
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
obolnetwork/charon-dkg-sidecar:maine263be0a7440
minimatch@9.0.5
9.0.7

Open the chart page →

7,457
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
minimatch@5.1.6
5.1.8

Open the chart page →

4,083
audiobookshelfcharts-derwitt-devVerified publisher1.1.01 of 1See more

audiobookshelf charts-derwitt-dev 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
minimatch@3.1.2
3.1.4

Open the chart page →

1,722
ddb-proxycharts-derwitt-devVerified publisher1.3.01 of 1See more

ddb-proxy charts-derwitt-dev 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-27904.

Container imageDigestPackageFixed in
ghcr.io/mrprimate/ddb-proxy:0.0.258dc2d7fb460f
minimatch@3.1.2
3.1.4

Open the chart page →

812

Container images carrying it

842 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
minimatch@9.0.5
9.0.7
1
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
minimatch@3.1.2
3.1.4
1
ghcr.io/middleware-labs/odigos-ui:middleware-test-0.0.787120a4561a9
minimatch@3.1.2
3.1.4
1
ghcr.io/middleware-labs/vision-odiglet:middleware-test-0.0.3bce34c98668e
minimatch@3.1.2
3.1.4
1
ghcr.io/middleware-labs/vision-ui:middleware-test-0.0.853772b7b42c7
minimatch@3.1.2
3.1.4
1
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
minimatch@3.1.2
3.1.4
1
ghcr.io/mmontes11/iot-biot:v3.11.033f7976b26a8
minimatch@3.0.4
3.1.4
1
ghcr.io/mmontes11/iot-thing:v3.11.0542e91e8499c
minimatch@3.0.4
3.1.4
1
ghcr.io/mmontes11/iot-worker:v3.11.0491bb243f555
minimatch@3.0.4
3.1.4
1
ghcr.io/mrprimate/ddb-proxy:0.0.258dc2d7fb460f
minimatch@3.1.2
3.1.4
1
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
minimatch@9.0.5
9.0.7
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
minimatch@10.1.2
10.2.3
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
minimatch@9.0.5
9.0.7
1
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
minimatch@3.1.2
3.1.4
1
ghcr.io/open-telemetry/demo:1.12.0-paymentserviceb0f13eef3abf
minimatch@9.0.3
9.0.7
1
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
minimatch@9.0.5
9.0.7
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
minimatch@3.1.2
3.1.4
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
minimatch@9.0.5
9.0.7
1
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
minimatch@3.1.2
3.1.4
1
ghcr.io/radar-base/radar-self-enrolment-ui:0.1.0b9a7cd3cc099
minimatch@9.0.5
9.0.7
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
minimatch@9.0.1
9.0.7
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
minimatch@5.0.1
5.1.8
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
minimatch@3.1.2
3.1.4
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
minimatch@3.0.4
3.1.4
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
minimatch@3.1.2
3.1.4
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
minimatch@5.1.6
5.1.8
1
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
minimatch@9.0.5
9.0.7
1
ghcr.io/solucteam/outscale-s3-explorer:v1.0.09665c3e71889
minimatch@9.0.5
9.0.7
1
ghcr.io/tale/headplane:0.5.50dbc52cffc19
minimatch@9.0.5
9.0.7
1
ghcr.io/talhajuikar/stateful-data-generator:v1.1.1dfd7ea7303a2
minimatch@3.1.2
3.1.4
1
ghcr.io/tasmoadmin/tasmoadmin:v3.3.205aeefbdac2b
minimatch@9.0.1
9.0.7
1
ghcr.io/techno-tim/littlelink-server:latest735a1fcd078b
minimatch@9.0.3
9.0.7
1
ghcr.io/theconnman/docker-hub-rss:0.6.238eba84b2be8
minimatch@9.0.5
9.0.7
1
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
minimatch@9.0.5
9.0.7
1
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
minimatch@9.0.5
9.0.7
1
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
minimatch@9.0.5
9.0.7
1
ghcr.io/umami-software/umami:3.0.328f263fe06f7
minimatch@9.0.5
9.0.7
1
ghcr.io/umami-software/umami:postgresql-v1.39.560fa8875aff8
minimatch@3.1.2
3.1.4
1
ghcr.io/umami-software/umami:postgresql-v2.20.173ca19b41745
minimatch@9.0.5
9.0.7
1
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
minimatch@3.1.2
3.1.4
1
ghcr.io/waldo-vision/migrate:v0.3.6ae31923312ed
minimatch@5.1.6
5.1.8
1
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
minimatch@5.1.6
5.1.8
1
ghcr.io/wasilak/kube-ingress-dash:0.3.1ff55992f905c
minimatch@9.0.5
9.0.7
1
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
minimatch@3.0.4
3.1.4
1
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
minimatch@9.0.5
9.0.7
1
ghcr.io/wgbh-mla/dream-aapb:main288a4774aa90
minimatch@9.0.5
9.0.7
1
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
minimatch@9.0.5
9.0.7
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
minimatch@9.0.3
9.0.7
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
minimatch@9.0.4
9.0.7
1
ghcr.io/wundergraph/cosmo/cdn:0.14.1d86fcf169f15
minimatch@9.0.5
9.0.7
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.