StackRadar

CVE-2026-53571

High

Advisory

Published 15 Jun 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
43
of 17,781 indexed, latest versions
Container images
43
deployed by those charts
Fix available
1 of 1
affected package

vite: `server.fs.deny` bypass on Windows alternate paths

Carried by container images the latest versions of 43 of 17,781 indexed charts deploy, on 43 images.

Affected packageAffected versionsFixed inImages
vitenpm2.9.15, 3.2.5, 3.2.7, 4.0.4+32 more6.4.3, 7.3.5, 8.0.1643
OSV records
GHSA-fx2h-pf6j-xcff

Charts affected

43 by stars
ChartLatestAffected imagesRadar Score
openclawopenclaw-helmVerified publisher1.5.401 of 2See more

openclaw openclaw-helm 1.5.40

1 of the 2 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
vite@8.0.14
8.0.16

Open the chart page →

5,660
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
vite@4.1.3
6.4.3

Open the chart page →

4,431
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
vite@5.4.12
6.4.3

Open the chart page →

5,352
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
openmined/syft-frontend:0.9.5d11524a3854a
vite@4.5.3
6.4.3

Open the chart page →

17,245
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ghcr.io/tale/headplane:0.5.50dbc52cffc19
vite@6.0.6
6.4.3

Open the chart page →

7,949
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
thmmniii/fbs-qcm-frontend:v1.27.1a347f7f4d144
vite@5.4.11
6.4.3

Open the chart page →

28,534
aapbaapbVerified publisher0.1.31 of 1See more

aapb aapb 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/dream-aapb:main288a4774aa90
vite@7.3.1
7.3.5

Open the chart page →

1,044
directusdirectus-io2.1.01 of 3See more

directus directus-io 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
directus/directus:12.0.29c8470ea465c
vite@8.0.8
8.0.16

Open the chart page →

7,473
ethereumjsethereum-helm-chartsVerified publisher0.1.21 of 2See more

ethereumjs ethereum-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ethpandaops/ethereumjs:masterfb84b718500f
vite@7.1.12
7.3.5

Open the chart page →

1,442
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
vite@4.5.9
6.4.3

Open the chart page →

5,228
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
vite@6.3.5
6.4.3

Open the chart page →

6,873
adeptia-automate-mcpadeptia-automate-mcp1.0.01 of 2See more

adeptia-automate-mcp adeptia-automate-mcp 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
vite@7.3.1
7.3.5

Open the chart page →

3,600
argonix-apiargonix0.2.01 of 4See more

argonix-api argonix 0.2.0

1 of the 4 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api-frontend:1.0.0b6a67099e4c5
vite@6.4.1
6.4.3

Open the chart page →

4,923
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
vite@5.1.4
6.4.3

Open the chart page →

32,501
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad3 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

3 of the 6 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
vite@5.4.11
6.4.3
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
vite@6.3.6
6.4.3
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
vite@6.3.6
6.4.3

Open the chart page →

18,293
conversor-temperaturaconversor-temperaturaVerified publisher0.1.01 of 1See more

conversor-temperatura conversor-temperatura 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
felipecs8/conversor-temperatura:v1f945423be36d
vite@5.4.21
6.4.3

Open the chart page →

1,527
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
vite@4.5.2
6.4.3

Open the chart page →

4,551
dumpstoredumpstore0.1.11 of 2See more

dumpstore dumpstore 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
vite@5.4.8
6.4.3

Open the chart page →

4,251
lodestarethereum-helm-chartsVerified publisher1.2.21 of 2See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
chainsafe/lodestar:latest5593f6e97912
vite@6.1.6
6.4.3

Open the chart page →

2,522
automatischhelmforgeVerified publisher1.3.71 of 4See more

automatisch helmforge 1.3.7

1 of the 4 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
automatischio/automatisch:0.15.03bace7a12d5f
vite@6.3.3
6.4.3

Open the chart page →

5,769
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
vite@6.0.11
6.4.3

Open the chart page →

6,012
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
vite@2.9.15
6.4.3

Open the chart page →

25,017
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
vite@4.0.4
6.4.3

Open the chart page →

4,944
kenerkener-chart0.0.71 of 1See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
vite@4.5.9
6.4.3

Open the chart page →

5,228
lynxpromptlynxpromptVerified publisher0.1.21 of 3See more

lynxprompt lynxprompt 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
drumsergio/lynxprompt:2.0.75c6afb6679301
vite@8.0.12
8.0.16

Open the chart page →

1,852
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
vite@5.0.12
6.4.3

Open the chart page →

4,560
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
vite@7.3.1
7.3.5

Open the chart page →

3,798
indexer-toolsnodeifyVerified publisher2.1.11 of 1See more

indexer-tools nodeify 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
vite@3.2.5
6.4.3

Open the chart page →

2,919
recipe-apprecipe-app0.1.01 of 2See more

recipe-app recipe-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
vite@5.4.4
6.4.3

Open the chart page →

3,271
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
sharanalwar/redchef-frontend:latest5e82950b16b7
vite@6.2.6
6.4.3

Open the chart page →

4,763
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
vite@5.4.3
6.4.3

Open the chart page →

7,084
claude-relayrevolution10.1.371 of 4See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
vite@5.4.19
6.4.3

Open the chart page →

4,600
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
vite@7.2.7
7.3.5

Open the chart page →

5,819
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
vite@4.1.3
6.4.3

Open the chart page →

4,431
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
vite@5.3.6
6.4.3

Open the chart page →

4,052
strapistrapi-xmv0.1.11 of 1See more

strapi strapi-xmv 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
ghcr.io/xmv-solutions-gmbh/strapi:latesta288b4571142
vite@5.4.21
6.4.3

Open the chart page →

676
slack-emoji-makersuminhong0.1.01 of 1See more

slack-emoji-maker suminhong 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
vite@4.5.13
6.4.3

Open the chart page →

1,653
tensorzerotensorzero2026.6.01 of 2See more

tensorzero tensorzero 2026.6.0

1 of the 2 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
tensorzero/ui:2026.6.0f2563d54724e
vite@7.3.2
7.3.5

Open the chart page →

3,972
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
opea/codegen-ui:1.02bee4eb66f3e
vite@4.5.5
6.4.3

Open the chart page →

28,814
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
vite@5.4.6
6.4.3

Open the chart page →

28,385
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
vite@5.4.6
6.4.3

Open the chart page →

28,858
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
vite@4.5.9
6.4.3

Open the chart page →

5,228
workadventureworkadventure1.1.01 of 9See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2026-53571.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
vite@3.2.7
6.4.3

Open the chart page →

16,083

Container images carrying it

43 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
outlinewiki/outline:0.69.1d060dcd8f9aa
vite@4.1.3
6.4.3
2
rajnandan1/kener:3.2.1930407afca731
vite@4.5.9
6.4.3
2
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
vite@7.3.1
7.3.5
1
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
vite@5.4.4
6.4.3
1
automatischio/automatisch:0.15.03bace7a12d5f
vite@6.3.3
6.4.3
1
chainsafe/lodestar:latest5593f6e97912
vite@6.1.6
6.4.3
1
chainsafe/lodestar:v1.27.07b9fe4aa8073
vite@5.3.6
6.4.3
1
directus/directus:12.0.29c8470ea465c
vite@8.0.8
8.0.16
1
directus/directus:11.1.0e3c8bb975350
vite@4.5.2
6.4.3
1
drumsergio/lynxprompt:2.0.75c6afb6679301
vite@8.0.12
8.0.16
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
vite@4.0.4
6.4.3
1
ethpandaops/ethereumjs:masterfb84b718500f
vite@7.1.12
7.3.5
1
felipecs8/conversor-temperatura:v1f945423be36d
vite@5.4.21
6.4.3
1
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
vite@4.5.13
6.4.3
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
vite@5.0.12
6.4.3
1
opea/codegen-ui:1.02bee4eb66f3e
vite@4.5.5
6.4.3
1
opea/codetrans-ui:1.03ef121f34610
vite@5.4.6
6.4.3
1
opea/docsum-ui:1.07f854e9bffaf
vite@5.4.6
6.4.3
1
openbas/caldera-server:5.1.0a277796d9724
vite@2.9.15
6.4.3
1
openmined/syft-frontend:0.9.5d11524a3854a
vite@4.5.3
6.4.3
1
outlinewiki/outline:0.82.0494dfb9249a6
vite@5.4.12
6.4.3
1
sharanalwar/redchef-frontend:latest5e82950b16b7
vite@6.2.6
6.4.3
1
tensorzero/ui:2026.6.0f2563d54724e
vite@7.3.2
7.3.5
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
vite@3.2.7
6.4.3
1
thmmniii/fbs-qcm-frontend:v1.27.1a347f7f4d144
vite@5.4.11
6.4.3
1
ghcr.io/argonix-io/argonix-api-frontend:1.0.0b6a67099e4c5
vite@6.4.1
6.4.3
1
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
vite@7.3.1
7.3.5
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
vite@5.1.4
6.4.3
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
vite@5.4.11
6.4.3
1
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
vite@6.3.6
6.4.3
1
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
vite@6.3.6
6.4.3
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
vite@6.0.11
6.4.3
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
vite@5.4.3
6.4.3
1
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
vite@5.4.8
6.4.3
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
vite@8.0.14
8.0.16
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
vite@4.5.9
6.4.3
1
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
vite@7.2.7
7.3.5
1
ghcr.io/tale/headplane:0.5.50dbc52cffc19
vite@6.0.6
6.4.3
1
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
vite@3.2.5
6.4.3
1
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
vite@5.4.19
6.4.3
1
ghcr.io/wgbh-mla/dream-aapb:main288a4774aa90
vite@7.3.1
7.3.5
1
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
vite@6.3.5
6.4.3
1
ghcr.io/xmv-solutions-gmbh/strapi:latesta288b4571142
vite@5.4.21
6.4.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.