StackRadar

CVE-2026-2950

Medium

Advisory

Published 21 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.016
75th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
469
of 17,787 indexed, latest versions
Container images
488
deployed by those charts
Fix available
4 of 4
affected packages

lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`

Carried by container images the latest versions of 469 of 17,787 indexed charts deploy, on 488 images.

Affected packageAffected versionsFixed inImages
lodashnpm0.9.2, 1.0.2, 1.3.1, 2.4.1+13 more4.17.23, 4.18.0484
lodash-esnpm4.17.4, 4.17.15, 4.17.20, 4.17.21+2 more4.17.23, 4.18.0112
lodash.unsetnpm4.5.2, 4.17.15, 4.17.214.18.05
node-lodashdeb4.17.15+dfsg-2, 4.17.21+dfsg+~cs8.31.198.20210220-94.17.15+dfsg-2ubuntu0.1~esm1, 4.17.21+dfsg+~cs8.31.198.20210220-9ubuntu0.24.04.1~esm13
OSV records
GHSA-f23m-r3pf-42rhGHSA-xxjr-mmjv-4gpgUBUNTU-CVE-2026-2950
Also known as
CVE-2025-13465, USN-8411-1

Charts affected

469 by stars
ChartLatestAffected imagesRadar Score
myawesomeapp-marmyawesomeapp-mar0.1.11 of 1See more

myawesomeapp-mar myawesomeapp-mar 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
winfred008/amazon:910a68de5b398
lodash@4.17.21
4.17.23

Open the chart page →

2,116
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
lodash@4.17.21
4.17.23

Open the chart page →

17,929
dashynas-helm-chartsVerified publisher1.0.41 of 1See more

dashy nas-helm-charts 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
lissy93/dashy:2.0.51991f7be5ed0
lodash@4.17.21
4.17.23

Open the chart page →

3,269
smilencsaVerified publisher1.1.02 of 23See more

smile ncsa 1.1.0

2 of the 23 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
lodash@4.17.21
4.17.23
socialmediamacroscope/smile_server:0.3.31a528c794270
lodash@4.17.21
4.17.23

Open the chart page →

109,294
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
lodash@4.17.23
4.18.0

Open the chart page →

30,028
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
lodash@4.17.23
4.18.0

Open the chart page →

3,798
indexer-toolsnodeifyVerified publisher2.1.11 of 1See more

indexer-tools nodeify 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
lodash@4.17.21
4.17.23

Open the chart page →

2,919
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
lodash@4.17.21
4.17.23

Open the chart page →

15,132
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
lodash@4.17.21
4.17.23

Open the chart page →

15,206
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
lodash@4.17.21
4.17.23

Open the chart page →

15,187
example-dev-toolsnoygal0.2.82 of 3See more

example-dev-tools noygal 0.2.8

2 of the 3 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
lodash@1.3.1
4.18.0
linuxserver/codimd:latestb801bbcf6386
lodash@4.17.20
4.17.23

Open the chart page →

27,465
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
lodash@4.17.21
4.17.23

Open the chart page →

4,219
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
lodash@4.17.21
4.17.23

Open the chart page →

2,421
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
lodash@3.10.1
4.18.0

Open the chart page →

88,546
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
lodash@3.10.1
4.18.0

Open the chart page →

38,865
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
lodash@4.17.21
lodash-es@4.17.21
4.17.23
4.17.23

Open the chart page →

9,968
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
openwhisk/alarmprovider:2.2.0b695a6ceb406
lodash@4.17.20
lodash@3.10.1
4.17.23
4.18.0

Open the chart page →

36,215
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
lodash@4.17.21
4.17.23

Open the chart page →

71,208
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
lodash@4.17.21
4.17.23

Open the chart page →

6,583
mishtip2p-avs0.1.01 of 2See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
mishtinetwork/operator:latestbb3fe67a5f7c
lodash@4.17.21
4.17.23

Open the chart page →

3,999
ungatep2p-avs0.1.01 of 3See more

ungate p2p-avs 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
lodash@4.17.21
4.17.23

Open the chart page →

27,373
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
lodash@4.17.21
lodash-es@4.17.21
4.17.23
4.17.23

Open the chart page →

6,524
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
slagattollas/server-practica:latest6dd8ead8e2b1
lodash@4.17.21
4.17.23

Open the chart page →

28,484
kratos-selfservice-ui-noderadar-baseVerified publisher0.43.11 of 1See more

kratos-selfservice-ui-node radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
lodash@4.17.21
4.17.23

Open the chart page →

2,969
readability-js-serverreadability-js-server0.1.01 of 1See more

readability-js-server readability-js-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
phpdockerio/readability-js-server:1.8.0ea8354b42600
lodash@4.17.21
4.17.23

Open the chart page →

1,858
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
sharanalwar/redchef-frontend:latest5e82950b16b7
lodash@4.17.21
4.17.23

Open the chart page →

4,763
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
lodash@4.17.21
4.17.23

Open the chart page →

1,038
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
lodash@4.17.21
4.17.23

Open the chart page →

1,884
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
lodash@4.17.21
4.17.23

Open the chart page →

6,282
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
lodash@4.17.21
4.17.23

Open the chart page →

7,084
claude-relayrevolution10.1.371 of 4See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
lodash@4.17.21
lodash-es@4.17.21
4.17.23
4.17.23

Open the chart page →

4,600
jsonplaceholderrgnu1.0.01 of 1See more

jsonplaceholder rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
svenwal/jsonplaceholder:latestba2f285af432
lodash@4.17.21
4.17.23

Open the chart page →

1,547
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
lodash@4.17.21
4.17.23

Open the chart page →

6,026
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
lodash@4.17.15
4.17.23

Open the chart page →

5,215
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
lodash@4.17.23
4.18.0

Open the chart page →

68,240
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
lodash@4.17.21
4.17.23

Open the chart page →

5,338
audiobookshelfrubxkubeVerified publisher0.1.31 of 1See more

audiobookshelf rubxkube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
lodash@4.17.21
4.17.23

Open the chart page →

1,722
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
lodash@4.17.21
lodash-es@4.17.21
4.17.23
4.17.23

Open the chart page →

7,413
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
lodash@4.17.23
4.18.0

Open the chart page →

30,219
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
lodash@4.17.21
4.17.23
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
lodash@4.17.21
4.17.23

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
lodash@4.17.21
4.17.23

Open the chart page →

16,620
samplesample0.1.01 of 2See more

sample sample 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
library/mongo-express:1.0.2-20-alpine3.191aae00775251
lodash@4.17.21
lodash-es@4.17.21
4.17.23
4.17.23

Open the chart page →

2,309
grocysarab97Verified publisher0.1.11 of 1See more

grocy sarab97 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
linuxserver/grocy:4.0.1f8f5f96b6ea8
lodash@4.17.21
4.17.23

Open the chart page →

2,449
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
lodash@4.17.21
4.17.23

Open the chart page →

4,744
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
lodash@4.17.21
4.17.23

Open the chart page →

4,684
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
lodash@4.17.21
lodash-es@4.17.21
4.17.23
4.17.23

Open the chart page →

5,582
hedgedocschmitzis0.1.121 of 1See more

hedgedoc schmitzis 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
lodash@4.17.21
4.17.23

Open the chart page →

3,118
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
lodash@4.17.21
lodash-es@4.17.21
4.17.23
4.17.23

Open the chart page →

4,431
wekanschmitzis1.1.11 of 1See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
quay.io/wekan/wekan:v5.65cb17600883a3
lodash@4.17.4
lodash@1.0.2
4.17.23
4.18.0

Open the chart page →

3,638
semaphoreschoenwald0.1.31 of 1See more

semaphore schoenwald 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-2950.

Container imageDigestPackageFixed in
0hlov3/semaphore:v1.0.050f874ec096b
lodash@4.17.21
4.17.23

Open the chart page →

1,796

Container images carrying it

488 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
supabase/storage-api:v1.12.0f983fb50bd95
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
supabase/studio:20241021-9f9b08326d8070c55e9
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
svenwal/jsonplaceholder:latestba2f285af432
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
lodash@4.17.21
lodash@4.17.21
lodash.unset@4.17.15
node-lodash@4.17.15+dfsg-2
4.17.23
4.18.0
4.18.0
4.17.15+dfsg-2ubuntu0.1~esm1
1
sysnet4admin/colosseum-cms:loge74b43c7f492
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
temporalio/web:1.14.033cfa863d8ce
lodash@4.17.21
lodash@4.17.21
lodash-es@4.17.15
lodash-es@4.17.15
4.17.23
4.18.0
4.17.23
4.18.0
1
testhubio/testhub-frontend:on-preme86c2db53be8
lodash@4.17.15
lodash@4.17.15
4.17.23
4.18.0
1
thecodingmachine/workadventure-back:v1.17.764001369dad5
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
thelounge/thelounge:4.3.0-alpine0037aa258261
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
thelounge/thelounge:4.2.0-alpine639978459c3a
lodash@4.17.20
lodash@4.17.20
4.17.23
4.18.0
1
thmmniii/fbs-qcm-frontend:v1.27.1a347f7f4d144
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
lodash@4.17.4
lodash@4.17.4
4.17.23
4.18.0
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
treskon/portrait-ui:DEV-lateste7970783bc8d
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
tzahi12345/youtubedl-material:4.23720b856bd2f
lodash@4.17.19
lodash@4.17.19
4.17.23
4.18.0
1
ubercadence/web:v3.29.58564a5b44a6d
lodash@4.17.20
lodash@4.17.20
lodash-es@4.17.20
lodash-es@4.17.20
4.17.23
4.18.0
4.17.23
4.18.0
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
unleashorg/unleash-enterprise:7.5.0245aeba40053
lodash@4.17.23
lodash.unset@4.5.2
lodash.unset@4.5.2
4.18.0
no fix listed
4.18.0
1
unleashorg/unleash-server:7.5.09adb37e399ba
lodash@4.17.23
4.18.0
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
vlebediantsev/notes-admin-front:latest007c6670ff48
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
vlebediantsev/notes-project-front:latest945675fd2636
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
wazuh/wazuh-dashboard:4.11.10c58e7b47bb6
lodash@4.17.21
lodash@4.17.21
lodash-es@4.17.21
lodash-es@4.17.21
4.17.23
4.18.0
4.17.23
4.18.0
1
wazuh/wazuh-dashboard:4.4.11787550d2358
lodash@4.17.21
lodash@4.17.21
lodash-es@4.17.21
lodash-es@4.17.21
4.17.23
4.18.0
4.17.23
4.18.0
1
wazuh/wazuh-dashboard:4.14.491c8d793746f
lodash@4.17.21
lodash@4.17.21
lodash-es@4.17.21
lodash-es@4.17.21
4.17.23
4.18.0
4.17.23
4.18.0
1
wazuh/wazuh-dashboard:4.14.391e4f0a7feed
lodash@4.17.21
lodash@4.17.21
lodash-es@4.17.21
lodash-es@4.17.21
4.17.23
4.18.0
4.17.23
4.18.0
1
wekanteam/wekan:v4.2268a51f0327df
lodash@4.17.19
lodash@4.17.19
4.17.23
4.18.0
1
willwill/kube-slack:v4.1.1d443017aae98
lodash@4.17.11
lodash@4.17.11
4.17.23
4.18.0
1
winfred008/amazon:910a68de5b398
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
wiremind/scrapoxy:lateste7048929a676
lodash@4.17.15
lodash@4.17.15
4.17.23
4.18.0
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ymuski/skooner:latest67819ca511b5
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
youssef11gaber10/deployment-ui-react:latestba6853e35c60
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
yuzutech/kroki-excalidraw:0.29.157917319ea70
lodash-es@4.17.22
lodash-es@4.17.22
4.17.23
4.18.0
1
yuzutech/kroki-mermaid:0.29.1963b4acfde6e
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
zazuko/trifid:2.3.7054be137de70
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
zimengxiong/excalidash-backend:0.4.271273af713c91
lodash@4.17.23
4.18.0
1
zooz/predator:1.6f491d1f7a865
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
zwavejs/zwave-js-ui:11.22.314d018bb689e
lodash@4.17.23
4.18.0
1
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/ajnart/homarr:lateste103abadfb52
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
lodash@4.17.23
4.18.0
1
ghcr.io/aolde/lametric-nightscout-proxy:latest7d1951b6baf5
lodash@4.17.21
lodash@4.17.21
4.17.23
4.18.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.