StackRadar

CVE-2026-39363

High

Advisory

Published 6 Apr 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.034
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
13
of 17,781 indexed, latest versions
Container images
14
deployed by those charts
Fix available
1 of 1
affected package

Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket

Carried by container images the latest versions of 13 of 17,781 indexed charts deploy, on 14 images.

Affected packageAffected versionsFixed inImages
vitenpm6.0.6, 6.0.11, 6.1.6, 6.2.6+7 more6.4.2, 7.3.214
OSV records
GHSA-p9ff-h696-f583

Charts affected

13 by stars
ChartLatestAffected imagesRadar Score
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2026-39363.

Container imageDigestPackageFixed in
ghcr.io/tale/headplane:0.5.50dbc52cffc19
vite@6.0.6
6.4.2

Open the chart page →

7,949
aapbaapbVerified publisher0.1.31 of 1See more

aapb aapb 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-39363.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/dream-aapb:main288a4774aa90
vite@7.3.1
7.3.2

Open the chart page →

1,044
ethereumjsethereum-helm-chartsVerified publisher0.1.21 of 2See more

ethereumjs ethereum-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-39363.

Container imageDigestPackageFixed in
ethpandaops/ethereumjs:masterfb84b718500f
vite@7.1.12
7.3.2

Open the chart page →

1,442
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-39363.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
vite@6.3.5
6.4.2

Open the chart page →

6,873
adeptia-automate-mcpadeptia-automate-mcp1.0.01 of 2See more

adeptia-automate-mcp adeptia-automate-mcp 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39363.

Container imageDigestPackageFixed in
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
vite@7.3.1
7.3.2

Open the chart page →

3,600
argonix-apiargonix0.2.01 of 4See more

argonix-api argonix 0.2.0

1 of the 4 container images this version deploys carry CVE-2026-39363.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api-frontend:1.0.0b6a67099e4c5
vite@6.4.1
6.4.2

Open the chart page →

4,923
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad2 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2026-39363.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
vite@6.3.6
6.4.2
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
vite@6.3.6
6.4.2

Open the chart page →

18,293
lodestarethereum-helm-chartsVerified publisher1.2.21 of 2See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-39363.

Container imageDigestPackageFixed in
chainsafe/lodestar:latest5593f6e97912
vite@6.1.6
6.4.2

Open the chart page →

2,522
automatischhelmforgeVerified publisher1.3.71 of 4See more

automatisch helmforge 1.3.7

1 of the 4 container images this version deploys carry CVE-2026-39363.

Container imageDigestPackageFixed in
automatischio/automatisch:0.15.03bace7a12d5f
vite@6.3.3
6.4.2

Open the chart page →

5,769
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39363.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
vite@6.0.11
6.4.2

Open the chart page →

6,012
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-39363.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
vite@7.3.1
7.3.2

Open the chart page →

3,798
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39363.

Container imageDigestPackageFixed in
sharanalwar/redchef-frontend:latest5e82950b16b7
vite@6.2.6
6.4.2

Open the chart page →

4,763
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2026-39363.

Container imageDigestPackageFixed in
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
vite@7.2.7
7.3.2

Open the chart page →

5,819

Container images carrying it

14 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
vite@7.3.1
7.3.2
1
automatischio/automatisch:0.15.03bace7a12d5f
vite@6.3.3
6.4.2
1
chainsafe/lodestar:latest5593f6e97912
vite@6.1.6
6.4.2
1
ethpandaops/ethereumjs:masterfb84b718500f
vite@7.1.12
7.3.2
1
sharanalwar/redchef-frontend:latest5e82950b16b7
vite@6.2.6
6.4.2
1
ghcr.io/argonix-io/argonix-api-frontend:1.0.0b6a67099e4c5
vite@6.4.1
6.4.2
1
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
vite@7.3.1
7.3.2
1
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
vite@6.3.6
6.4.2
1
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
vite@6.3.6
6.4.2
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
vite@6.0.11
6.4.2
1
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
vite@7.2.7
7.3.2
1
ghcr.io/tale/headplane:0.5.50dbc52cffc19
vite@6.0.6
6.4.2
1
ghcr.io/wgbh-mla/dream-aapb:main288a4774aa90
vite@7.3.1
7.3.2
1
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
vite@6.3.5
6.4.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.