CVE-2026-45819
HighAdvisory
Published 13 Aug 2026In the index since 9 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.7
- base score, highest
- EPSS
- 0.004
- 31st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 44
- of 17,781 indexed, latest versions
- Container images
- 40
- deployed by those charts
- Fix available
- 1 of 1
- affected package
baseline-browser-mapping process termination on invalid input causes denial of service
Carried by container images the latest versions of 44 of 17,781 indexed charts deploy, on 40 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| baseline-browser-mappingnpm | 2.8.16, 2.8.18, 2.8.20, 2.8.25+19 more | 2.11.0 | 40 |
- OSV records
- GHSA-w5vr-8v7q-w6rv
Charts affected
44 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| difydoubanVerified publisher | 0.10.0 | 1 of 6See more | 19,391 |
| servarrkubitodevVerified publisher | 1.5.2 | 1 of 10See more | 3,004 |
| wekanwekanVerified publisher | 11.76.0 | 1 of 3See more | 1,576 |
| budibasebudibase | 0.0.0-master | 1 of 7See more | 10,775 |
| duplistatusduplistatusVerified publisher | 1.2.0 | 1 of 2See more | 1,870 |
| nocodbzekker6Verified publisher | 1.10.0 | 1 of 1See more | 4,016 |
| aapbaapbVerified publisher | 0.1.3 | 1 of 1See more | 1,044 |
| hermes-agentankra-chartsVerified publisher | 0.3.1 | 1 of 1See more | 5,880 |
| seerrbdclark-helm-chartsVerified publisher | 0.1.5 | 1 of 1See more | 1,991 |
| directusdirectus-io | 2.1.0 | 1 of 3See more | 7,473 |
| enbuildenbuildVerified publisher | 0.0.50 | 2 of 6See more | 31,510 |
| ethereumjsethereum-helm-chartsVerified publisher | 0.1.2 | 1 of 2See more | 1,442 |
| growthbookgrowthbook | 5.0.1 | 1 of 2See more | 709 |
| bulwark-maill4gVerified publisher | 0.2.2 | 1 of 1See more | 800 |
| opentelemetry-demoopentelemetry-helmVerified publisher | 0.41.1 | 1 of 34See more | 22,420 |
| peertubepeertubeVerified publisher | 0.1.3 | 1 of 1See more | 7,035 |
| portraitportraitVerified publisher | 0.2.13 | 1 of 8See more | 31,844 |
| rocketadminrocketadminOfficialVerified publisher | 1.0.42 | 1 of 1See more | 5,482 |
| wikiwenerme | 2.2.0 | 1 of 2See more | 3,833 |
| argonix-apiargonix | 0.2.0 | 1 of 4See more | 4,923 |
| dv-podcharonOfficialVerified publisher | 0.19.1 | 1 of 5See more | 7,405 |
| dyff-frontenddyff-frontendVerified publisher | 0.20.1 | 1 of 1See more | 973 |
| flanksource-uiflanksourceVerified publisher | 1.4.318 | 1 of 1See more | 2,558 |
| mission-controlflanksourceVerified publisher | 0.1.336 | 1 of 8See more | 8,902 |
| web-checkhajowielandVerified publisher | 1.0.1 | 1 of 1See more | 9,047 |
| paprahelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 2,538 |
| ryothelmforgeVerified publisher | 1.0.0 | 1 of 2See more | 6,012 |
| strapihelmforgeVerified publisher | 2.3.14 | 1 of 3See more | 2,061 |
| self-learning-platformhelm-self-learning-platformVerified publisher | 1.1.0 | 1 of 1See more | 1,468 |
| multicaicoretechVerified publisher | 0.4.42 | 1 of 5See more | 2,722 |
| keycloak-multi-client-notifierkeycloak-multi-client-notifier | 2.1.2 | 1 of 2See more | 1,473 |
| pangolinkrzwiatrzyk | 0.11.0 | 1 of 1See more | 3,441 |
| homepagekubernetes-homelab-helm-chartsVerified publisher | 0.1.0 | 1 of 1See more | 1,378 |
| portfolio-trackerkubernetes-homelab-helm-chartsVerified publisher | 0.1.0 | 1 of 3See more | 1,498 |
| seerrkubernetes-homelab-helm-chartsVerified publisher | 0.1.2 | 1 of 1See more | 2,548 |
| lynxpromptlynxpromptVerified publisher | 0.1.2 | 1 of 3See more | 1,852 |
| mauticmautic-chartVerified publisher | 1.0.2 | 1 of 3See more | 8,303 |
| nexus-tasksnexus-tasks | 2.0.0 | 1 of 5See more | 3,798 |
| web-checkrm3lVerified publisher | 0.1.0 | 1 of 1See more | 9,047 |
| seerr-chartseerr-chartVerified publisher | 3.9.1 | 1 of 1See more | 1,991 |
| fdi-dotstatsuite-sfs-solrstatcan | 1.0.2 | 1 of 4See more | 6,065 |
| fdi-dotstatsuite-sfs-solr-statefulstatcan | 1.0.2 | 1 of 2See more | 919 |
| tensorzerotensorzero | 2026.6.0 | 1 of 2See more | 3,972 |
| wikiwikijs | 3.0.0 | 1 of 2See more | 5,459 |
Container images carrying it
40 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | f4768de5f616 | baseline-browser-mapping | 2.11.0 | 3 |
| requarks/ | 68f0d1848261 | baseline-browser-mapping | 2.11.0 | 2 |
| siscc/ | 12c5048f7402 | baseline-browser-mapping | 2.11.0 | 2 |
| ghcr.io/ | a4e021c0f6a9 | baseline-browser-mapping | 2.11.0 | 2 |
| budibase/ | 44fe6feab985 | baseline-browser-mapping | 2.11.0 | 1 |
| chocobozzz/ | 052712130691 | baseline-browser-mapping | 2.11.0 | 1 |
| devopsiaci/ | d9441c931f75 | baseline-browser-mapping | 2.11.0 | 1 |
| directus/ | 9c8470ea465c | baseline-browser-mapping | 2.11.0 | 1 |
| drumsergio/ | c6afb6679301 | baseline-browser-mapping | 2.11.0 | 1 |
| ethpandaops/ | fb84b718500f | baseline-browser-mapping | 2.11.0 | 1 |
| flanksource/ | 891f21df54fb | baseline-browser-mapping | 2.11.0 | 1 |
| fosrl/ | c32ad797ab96 | baseline-browser-mapping | 2.11.0 | 1 |
| growthbook/ | f53ead646b5f | baseline-browser-mapping | 2.11.0 | 1 |
| helmforge/ | 70e9143d6d92 | baseline-browser-mapping | 2.11.0 | 1 |
| langgenius/ | c306ac577912 | baseline-browser-mapping | 2.11.0 | 1 |
| mautic/ | eb8cc73d97e1 | baseline-browser-mapping | 2.11.0 | 1 |
| nocodb/ | d9516f0bf546 | baseline-browser-mapping | 2.11.0 | 1 |
| nousresearch/ | e0df6adebddf | baseline-browser-mapping | 2.11.0 | 1 |
| obolnetwork/ | e263be0a7440 | baseline-browser-mapping | 2.11.0 | 1 |
| rocketadmin/ | 10955ef540b9 | baseline-browser-mapping | 2.11.0 | 1 |
| tensorzero/ | f2563d54724e | baseline-browser-mapping | 2.11.0 | 1 |
| treskon/ | e7970783bc8d | baseline-browser-mapping | 2.11.0 | 1 |
| wsjbr/ | 5e594f5f09f6 | baseline-browser-mapping | 2.11.0 | 1 |
| ghcr.io/ | b6a67099e4c5 | baseline-browser-mapping | 2.11.0 | 1 |
| ghcr.io/ | fcbab3a24880 | baseline-browser-mapping | 2.11.0 | 1 |
| ghcr.io/ | 967470f05472 | baseline-browser-mapping | 2.11.0 | 1 |
| ghcr.io/ | f0a266506fcf | baseline-browser-mapping | 2.11.0 | 1 |
| ghcr.io/ | d8d784e50901 | baseline-browser-mapping | 2.11.0 | 1 |
| ghcr.io/ | 56efa3085895 | baseline-browser-mapping | 2.11.0 | 1 |
| ghcr.io/ | a752b6aee537 | baseline-browser-mapping | 2.11.0 | 1 |
| ghcr.io/ | fc937fbbf8e5 | baseline-browser-mapping | 2.11.0 | 1 |
| ghcr.io/ | 9505e349e140 | baseline-browser-mapping | 2.11.0 | 1 |
| ghcr.io/ | a281cb44176d | baseline-browser-mapping | 2.11.0 | 1 |
| ghcr.io/ | c4cbd5121236 | baseline-browser-mapping | 2.11.0 | 1 |
| ghcr.io/ | 4a9601847dfd | baseline-browser-mapping | 2.11.0 | 1 |
| ghcr.io/ | 288a4774aa90 | baseline-browser-mapping | 2.11.0 | 1 |
| public.ecr.aws/ | fea799d4fb2f | baseline-browser-mapping | 2.11.0 | 1 |
| registry.gitlab.com/ | 52549f52ae53 | baseline-browser-mapping | 2.11.0 | 1 |
| registry.gitlab.com/ | c7afac3446d6 | baseline-browser-mapping | 2.11.0 | 1 |
| registry.gitlab.com/ | d8a9cd4e1ae3 | baseline-browser-mapping | 2.11.0 | 1 |