CVE-2026-42224

High

Advisory

Published 29 Apr 2026In the index since 8 Sept 2026

ipl/web is vulnerable to reflected XSS by malformed search requests

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
ipl/webcomposer	v0.1.0, v0.9.1	0.10.3	2

2 by stars

Chart

Latest

Affected images

Radar Score

icinga2geek-cookbook

1 of the 1 container images this version deploys carry CVE-2026-42224.

Container image	Digest	Package	Fixed in
jordan/icinga2 :latest	f75025fe8ea8	ipl/web@v0.1.0	0.10.3

9,077

icingawebsvtech-public-helm-charts

1 of the 2 container images this version deploys carry CVE-2026-42224.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_icingaweb2 :v1.0.2	a59d0b81dde2	ipl/web@v0.9.1	0.10.3

2,038

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
jordan/icinga2 :latest	f75025fe8ea8	ipl/web@v0.1.0	0.10.3	1
svtechnmaa/svtech_icingaweb2 :v1.0.2	a59d0b81dde2	ipl/web@v0.9.1	0.10.3	1