StackRadar

CVE-2026-33151

High

Advisory

Published 18 Mar 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
95
of 17,781 indexed, latest versions
Container images
87
deployed by those charts
Fix available
1 of 1
affected package

socket.io allows an unbounded number of binary attachments

Carried by container images the latest versions of 95 of 17,781 indexed charts deploy, on 87 images.

Affected packageAffected versionsFixed inImages
socket.io-parsernpm2.2.0, 2.2.2, 2.2.6, 2.3.1+15 more3.3.5, 3.4.4, 4.2.687
OSV records
GHSA-677m-j7p3-52f9

Charts affected

95 by stars
ChartLatestAffected imagesRadar Score
theloungegeek-cookbookVerified publisher3.4.21 of 1See more

thelounge geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
thelounge/thelounge:4.2.0-alpine639978459c3a
socket.io-parser@3.3.0
3.3.5

Open the chart page →

2,689
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
socket.io-parser@4.2.4
4.2.6

Open the chart page →

9,019
hive-appgraphql-hive1.0.01 of 1See more

hive-app graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
socket.io-parser@3.2.0
3.3.5

Open the chart page →

2,682
hive-appgraphql-hive-subcharts1.0.01 of 1See more

hive-app graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
socket.io-parser@3.2.0
3.3.5

Open the chart page →

2,682
theloungehalkeye4.3.11 of 1See more

thelounge halkeye 4.3.1

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
thelounge/thelounge:4.3.0-alpine0037aa258261
socket.io-parser@4.0.4
4.2.6

Open the chart page →

1,938
croniclehelmforgeVerified publisher1.1.101 of 1See more

cronicle helmforge 1.1.10

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
soulteary/cronicle:0.9.80ac2512fa6e39
socket.io-parser@4.2.4
4.2.6

Open the chart page →

1,271
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
socket.io-parser@3.2.0
3.3.5
ibmcom/microclimate-portal:latested5505e5c7ec
socket.io-parser@3.2.0
3.3.5

Open the chart page →

57,669
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
frappe/frappe-socketio:v13.4.12095767a9e82
socket.io-parser@3.4.1
3.4.4

Open the chart page →

6,501
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
socket.io-parser@3.3.0
3.3.5

Open the chart page →

10,494
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
socket.io-parser@2.3.1
3.3.5

Open the chart page →

6,454
audiobookshelfk8s-home-lab-repo2.0.11 of 1See more

audiobookshelf k8s-home-lab-repo 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
socket.io-parser@4.2.4
4.2.6

Open the chart page →

2,350
shinobik8s-home-lab-repo2.1.11 of 1See more

shinobi k8s-home-lab-repo 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
shinobisystems/shinobi:latestc2f5ce2e1067
socket.io-parser@3.3.2
3.3.5

Open the chart page →

4,667
zwave-js-uik8sonlabVerified publisher0.7.121 of 1See more

zwave-js-ui k8sonlab 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
zwavejs/zwave-js-ui:11.22.314d018bb689e
socket.io-parser@4.2.4
4.2.6

Open the chart page →

973
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
socket.io-parser@4.2.4
4.2.6

Open the chart page →

1,290
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
socket.io-parser@4.2.4
4.2.6

Open the chart page →

9,098
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
socket.io-parser@4.2.5
4.2.6

Open the chart page →

6,356
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
socket.io-parser@4.2.4
4.2.6

Open the chart page →

2,685
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
ghcr.io/rodg/nodecg-base:latest31be4bf87070
socket.io-parser@4.2.4
4.2.6

Open the chart page →

7,315
iotmmontesVerified publisher0.3.22 of 7See more

iot mmontes 0.3.2

2 of the 7 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
socket.io-parser@3.4.2
3.4.4
ghcr.io/mmontes11/iot-thing:v3.11.0542e91e8499c
socket.io-parser@3.3.3
3.3.5

Open the chart page →

10,608
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
socket.io-parser@4.2.4
4.2.6

Open the chart page →

4,560
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
socket.io-parser@4.2.2
4.2.6

Open the chart page →

6,608
cloudcmdmy0nVerified publisher0.0.31 of 1See more

cloudcmd my0n 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
coderaiser/cloudcmd:16.6.1b34a9775c7ce
socket.io-parser@4.0.5
4.2.6

Open the chart page →

3,128
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
socket.io-parser@3.3.1
3.3.5

Open the chart page →

27,465
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
socket.io-parser@4.2.4
4.2.6

Open the chart page →

4,219
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
socket.io-parser@3.3.3
3.3.5

Open the chart page →

6,524
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
socket.io-parser@4.2.4
4.2.6

Open the chart page →

1,884
audiobookshelfrubxkubeVerified publisher0.1.31 of 1See more

audiobookshelf rubxkube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
socket.io-parser@4.2.4
4.2.6

Open the chart page →

1,722
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
socket.io-parser@4.2.4
4.2.6

Open the chart page →

4,744
hedgedocschmitzis0.1.121 of 1See more

hedgedoc schmitzis 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
socket.io-parser@3.4.1
3.4.4

Open the chart page →

3,118
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
socket.io-parser@4.2.1
4.2.6

Open the chart page →

4,431
dashkioskt3n2.0.01 of 1See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
socket.io-parser@2.2.6
3.3.5

Open the chart page →

3,827
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
socket.io-parser@4.2.1
4.2.6

Open the chart page →

4,017
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
socket.io-parser@4.2.4
4.2.6

Open the chart page →

39,090
redis-vector-dbtest-opea1.0.01 of 1See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
socket.io-parser@4.2.4
4.2.6

Open the chart page →

5,604
vehicle-dashboardtest-vehi-dash0.1.02 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
samajh/alprbackend:latestea742b4372ad
socket.io-parser@3.3.2
3.3.5
samajh/alprfrontend:latest05ef4fddbb75
socket.io-parser@3.3.2
3.3.5

Open the chart page →

20,270
csmmth-chartsVerified publisher0.1.01 of 3See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
catalysm/csmm:latestf003b35f54d9
socket.io-parser@3.4.1
3.4.4

Open the chart page →

3,576
excalidashunxwaresVerified publisher2026.2.51 of 2See more

excalidash unxwares 2026.2.5

1 of the 2 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.4.271273af713c91
socket.io-parser@4.2.4
4.2.6

Open the chart page →

2,620
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
socket.io-parser@4.2.4
4.2.6

Open the chart page →

3,746
hedgedocvista0.1.11 of 1See more

hedgedoc vista 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
socket.io-parser@3.4.1
3.4.4

Open the chart page →

3,118
vote-appvote-appVerified publisher1.0.71 of 6See more

vote-app vote-app 1.0.7

1 of the 6 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
thecloudspark/app-result:1.09a5302cb8312
socket.io-parser@4.2.4
4.2.6

Open the chart page →

3,031
resultappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

resultapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
socket.io-parser@3.3.3
3.3.5

Open the chart page →

1,263
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
socket.io-parser@3.3.3
3.3.5

Open the chart page →

8,262
resultappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

resultapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
socket.io-parser@3.3.3
3.3.5

Open the chart page →

1,263
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
socket.io-parser@3.3.3
3.3.5

Open the chart page →

8,262
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-33151.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
socket.io-parser@4.2.4
4.2.6

Open the chart page →

5,984

Container images carrying it

87 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
socket.io-parser@3.3.2
3.3.5
1
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
socket.io-parser@4.2.2
4.2.6
1
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
socket.io-parser@4.2.2
4.2.6
1
nocodb/nocodb:0.258.06779a4ddedf2
socket.io-parser@4.2.4
4.2.6
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
socket.io-parser@3.3.3
3.3.5
1
outlinewiki/outline:0.82.0494dfb9249a6
socket.io-parser@4.2.4
4.2.6
1
phntom/codimd:2.4.31b9aafbb62e6
socket.io-parser@3.3.3
3.3.5
1
polonel/trudesk:1.2.60cf6513f6fe3
socket.io-parser@4.2.1
4.2.6
1
redis/redisinsight:2.68019fcf774631
socket.io-parser@4.2.4
4.2.6
1
redis/redisinsight:3.2.055542a762210
socket.io-parser@4.2.4
4.2.6
1
redis/redisinsight:2.46699d341bd329
socket.io-parser@4.2.4
4.2.6
1
samajh/alprbackend:latestea742b4372ad
socket.io-parser@3.3.2
3.3.5
1
samajh/alprfrontend:latest05ef4fddbb75
socket.io-parser@3.3.2
3.3.5
1
shinobisystems/shinobi:dev3ca746937856
socket.io-parser@3.4.1
3.4.4
1
shinobisystems/shinobi:latestc2f5ce2e1067
socket.io-parser@3.3.2
3.3.5
1
sigp/siren:v3.0.42c219b04758e
socket.io-parser@4.2.4
4.2.6
1
soulteary/cronicle:0.9.80ac2512fa6e39
socket.io-parser@4.2.4
4.2.6
1
thecloudspark/app-result:1.09a5302cb8312
socket.io-parser@4.2.4
4.2.6
1
thelounge/thelounge:4.3.0-alpine0037aa258261
socket.io-parser@4.0.4
4.2.6
1
thelounge/thelounge:4.2.0-alpine639978459c3a
socket.io-parser@3.3.0
3.3.5
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
socket.io-parser@4.2.4
4.2.6
1
wiremind/scrapoxy:lateste7048929a676
socket.io-parser@3.1.3
3.3.5
1
zimengxiong/excalidash-backend:0.4.271273af713c91
socket.io-parser@4.2.4
4.2.6
1
zooz/predator:1.6f491d1f7a865
socket.io-parser@3.3.2
3.3.5
1
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
socket.io-parser@4.0.4
4.2.6
1
zwavejs/zwave-js-ui:11.22.314d018bb689e
socket.io-parser@4.2.4
4.2.6
1
ghcr.io/0xemma/reddark:main2a115e991894
socket.io-parser@4.2.4
4.2.6
1
ghcr.io/advplyr/audiobookshelf:2.0.3140aed2752c3
socket.io-parser@4.0.4
4.2.6
1
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
socket.io-parser@4.2.4
4.2.6
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
socket.io-parser@3.3.2
3.3.5
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
socket.io-parser@4.2.4
4.2.6
1
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
socket.io-parser@3.4.2
3.4.4
1
ghcr.io/mmontes11/iot-thing:v3.11.0542e91e8499c
socket.io-parser@3.3.3
3.3.5
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
socket.io-parser@4.0.5
4.2.6
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
socket.io-parser@4.2.4
4.2.6
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
socket.io-parser@4.2.4
4.2.6
1
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
socket.io-parser@2.2.6
3.3.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.