StackRadar

CVE-2026-34043

Medium

Advisory

Published 27 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.005
39th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
155
of 17,781 indexed, latest versions
Container images
160
deployed by those charts
Fix available
1 of 2
affected packages

Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects

Carried by container images the latest versions of 155 of 17,781 indexed charts deploy, on 160 images.

Affected packageAffected versionsFixed inImages
serialize-javascriptnpm5.0.1, 6.0.0, 6.0.1, 6.0.2+2 more7.0.5160
node-serialize-javascriptdeb6.0.1-1no fix listed1
OSV records
GHSA-qj8w-gfj5-8c6vUBUNTU-CVE-2026-34043

Charts affected

155 by stars
ChartLatestAffected imagesRadar Score
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
serialize-javascript@5.0.1
7.0.5

Open the chart page →

6,438
api-proxymoreillonVerified publisher0.1.41 of 1See more

api-proxy moreillon 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
moreillon/api-proxy:2373c1953739ef6956b5
serialize-javascript@6.0.0
7.0.5

Open the chart page →

1,712
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi-front:latestc1072f4ab6aa
serialize-javascript@6.0.0
7.0.5

Open the chart page →

8,556
group-managermoreillonVerified publisher0.4.41 of 3See more

group-manager moreillon 0.4.4

1 of the 3 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
moreillon/group-manager:v4.9.0d5a0ec8394c0
serialize-javascript@6.0.0
7.0.5

Open the chart page →

9,835
user-manager-mongodbmoreillonVerified publisher0.6.21 of 4See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
serialize-javascript@5.0.1
7.0.5

Open the chart page →

25,704
user-manager-neo4jmoreillonVerified publisher0.9.72 of 6See more

user-manager-neo4j moreillon 0.9.7

2 of the 6 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
moreillon/group-manager:v4.9.0d5a0ec8394c0
serialize-javascript@6.0.0
7.0.5
moreillon/user-manager:v5.0.2e1c9bfab5c16
serialize-javascript@6.0.0
7.0.5

Open the chart page →

30,363
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
serialize-javascript@6.0.1
7.0.5

Open the chart page →

6,608
myawesomeappmyawesomapp-mitchxxx0.1.11 of 1See more

myawesomeapp myawesomapp-mitchxxx 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
mitchxxx/amazon:214e72480ec63a
serialize-javascript@6.0.1
7.0.5

Open the chart page →

2,116
myawesomeappmyawesomeapp1.1.01 of 1See more

myawesomeapp myawesomeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
ooghenekaro/nodejswebapp:latestea5b71588a76
serialize-javascript@6.0.0
7.0.5

Open the chart page →

1,267
myawesomeapp14myawesomeapp140.1.11 of 1See more

myawesomeapp14 myawesomeapp14 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
ccjacobs14/amazon:59a9b14a6f09e
serialize-javascript@6.0.1
7.0.5

Open the chart page →

2,116
myawesomeappmyawesomeapp20.1.01 of 1See more

myawesomeapp myawesomeapp2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
mpopoola1/nodejsapp:latest061fc532de7d
serialize-javascript@6.0.0
7.0.5

Open the chart page →

1,118
myawesomeapp-feb24myawesomeapp-feb240.1.11 of 1See more

myawesomeapp-feb24 myawesomeapp-feb24 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
josepht05/nodejs-feb24:latest36cb0c618c94
serialize-javascript@6.0.0
7.0.5

Open the chart page →

1,070
myawesomeapp-janmyawesomeapp-jan0.1.11 of 1See more

myawesomeapp-jan myawesomeapp-jan 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
ooghenekaro/amazon:latest03394ba1d6d8
serialize-javascript@6.0.1
7.0.5

Open the chart page →

2,144
myawesomeapp-marmyawesomeapp-mar0.1.11 of 1See more

myawesomeapp-mar myawesomeapp-mar 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
winfred008/amazon:910a68de5b398
serialize-javascript@6.0.0
7.0.5

Open the chart page →

2,116
myawesomeappoctmyawesomeappoct0.1.11 of 1See more

myawesomeappoct myawesomeappoct 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
ooghenekaro/nodejswebappoct:lateste010f5fecbc7
serialize-javascript@6.0.0
7.0.5

Open the chart page →

1,164
myawesomeappoctmyawesomeappoct20230.1.11 of 1See more

myawesomeappoct myawesomeappoct2023 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
hamid2021/nodejs-dockercli:latest429d99890c3c
serialize-javascript@6.0.0
7.0.5

Open the chart page →

1,118
mydannyappmydannyapp1.1.01 of 1See more

mydannyapp mydannyapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
danny1dockerhub/nodejswebapp:lateste434683fcc89
serialize-javascript@6.0.0
7.0.5

Open the chart page →

1,267
mygreatappmygreatapp0.1.01 of 1See more

mygreatapp mygreatapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
ktitilayo2/nodejswebapp:latest8bac28058688
serialize-javascript@6.0.0
7.0.5

Open the chart page →

1,164
myhelmappmyhelm-app1.1.01 of 1See more

myhelmapp myhelm-app 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
patdada/bella-docker:v1.0.075127147a624
serialize-javascript@6.0.0
7.0.5

Open the chart page →

1,625
myhelmappmyhelmapp0.1.11 of 1See more

myhelmapp myhelmapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
tobirachel/node-project3:v17d9f37154994
serialize-javascript@6.0.0
7.0.5

Open the chart page →

3,359
myhelmappmyhelmapp11.1.01 of 1See more

myhelmapp myhelmapp1 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
josepht05/titajo-docker:v1.0.0d94024965d78
serialize-javascript@6.0.0
7.0.5

Open the chart page →

1,164
myhelmappmyhelmpapp1.1.01 of 1See more

myhelmapp myhelmpapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
ooghenekaro/hans-docker:v1.0.0d1f972aa844a
serialize-javascript@6.0.0
7.0.5

Open the chart page →

1,235
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
serialize-javascript@6.0.1
7.0.5

Open the chart page →

17,929
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
serialize-javascript@6.0.2
7.0.5

Open the chart page →

3,798
nodeapp-chartnodeapp-chart0.1.01 of 1See more

nodeapp-chart nodeapp-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
laly9999/node-app-dockerized:latest75ae77a20c6c
serialize-javascript@6.0.0
7.0.5

Open the chart page →

1,118
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
serialize-javascript@6.0.1
7.0.5

Open the chart page →

15,132
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
serialize-javascript@6.0.1
7.0.5

Open the chart page →

15,206
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
serialize-javascript@6.0.1
7.0.5

Open the chart page →

15,187
nottieawesomeappnottieawesomeapp0.1.01 of 1See more

nottieawesomeapp nottieawesomeapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
nottiey/mynodejswebapp:latest9c35a24c9eb3
serialize-javascript@6.0.0
7.0.5

Open the chart page →

1,164
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
serialize-javascript@5.0.1
7.0.5

Open the chart page →

27,465
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
serialize-javascript@6.0.1
7.0.5

Open the chart page →

6,282
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
serialize-javascript@5.0.1
7.0.5

Open the chart page →

6,026
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
serialize-javascript@6.0.2
7.0.5

Open the chart page →

5,338
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
serialize-javascript@6.0.1
7.0.5

Open the chart page →

7,413
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
serialize-javascript@6.0.0
7.0.5
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
serialize-javascript@6.0.1
7.0.5

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
serialize-javascript@6.0.0
7.0.5

Open the chart page →

16,620
semaphoreschoenwald0.1.31 of 1See more

semaphore schoenwald 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
0hlov3/semaphore:v1.0.050f874ec096b
serialize-javascript@6.0.0
7.0.5

Open the chart page →

1,796
secret-managersecret-managerVerified publisher1.0.01 of 4See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
serialize-javascript@6.0.2
7.0.5

Open the chart page →

5,497
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
serialize-javascript@6.0.1
7.0.5

Open the chart page →

7,574
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e11 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of the 5 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.19.2-branch.hotfix-2.19.1.124125-665e7e14f9241665ae3
serialize-javascript@6.0.2
7.0.5

Open the chart page →

16,368
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb1 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbfdc008effc7a
serialize-javascript@6.0.2
7.0.5

Open the chart page →

16,400
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091141 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.6-branch.testing1.154030-9b0911432fc940d9b4c
serialize-javascript@6.0.2
7.0.5

Open the chart page →

16,400
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b21 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.2-branch.testing4.134160-9fad4b210ad4ade8bf2
serialize-javascript@6.0.2
7.0.5

Open the chart page →

16,019
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef1 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.21.3-branch.testing5.219631-2153befd4ca6ebf09b9
serialize-javascript@6.0.2
7.0.5

Open the chart page →

15,635
retail-store-sample-checkout-chartstacksimplifyVerified publisher1.0.01 of 1See more

retail-store-sample-checkout-chart stacksimplify 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
serialize-javascript@6.0.2
7.0.5

Open the chart page →

1,313
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
serialize-javascript@5.0.1
7.0.5

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
serialize-javascript@5.0.1
7.0.5

Open the chart page →

11,554
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
samajh/alprfrontend:latest05ef4fddbb75
serialize-javascript@5.0.1
7.0.5

Open the chart page →

20,270
saleor-appstrieb-work0.6.03 of 5See more

saleor-apps trieb-work 0.6.0

3 of the 5 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
serialize-javascript@6.0.1
7.0.5
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
serialize-javascript@6.0.1
7.0.5
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
serialize-javascript@6.0.1
7.0.5

Open the chart page →

6,994
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2026-34043.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
serialize-javascript@6.0.2
7.0.5

Open the chart page →

17,323

Container images carrying it

160 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
serialize-javascript@6.0.2
7.0.5
1
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
serialize-javascript@6.0.2
7.0.5
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
serialize-javascript@6.0.0
7.0.5
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
serialize-javascript@6.0.0
7.0.5
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
serialize-javascript@6.0.0
7.0.5
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
serialize-javascript@6.0.2
7.0.5
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
serialize-javascript@5.0.1
7.0.5
1
quay.io/wi_stefan/consent-manager:0.0.656399619568b
serialize-javascript@6.0.2
7.0.5
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
serialize-javascript@6.0.2
7.0.5
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
serialize-javascript@6.0.2
7.0.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.