StackRadar

CVE-2026-54466

Critical

Advisory

Published 15 Jul 2026In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
66
of 17,781 indexed, latest versions
Container images
59
deployed by those charts
Fix available
1 of 1
affected package

websocket-driver: Message corruption via abuse of protocol length headers

Carried by container images the latest versions of 66 of 17,781 indexed charts deploy, on 59 images.

Affected packageAffected versionsFixed inImages
websocket-drivernpm0.6.5, 0.7.0, 0.7.3, 0.7.40.7.559
OSV records
GHSA-xv26-6w52-cph6

Charts affected

66 by stars
ChartLatestAffected imagesRadar Score
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54466.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
websocket-driver@0.7.4
0.7.5

Open the chart page →

15,132
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54466.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
websocket-driver@0.7.4
0.7.5

Open the chart page →

15,206
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54466.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
websocket-driver@0.7.4
0.7.5

Open the chart page →

15,187
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2026-54466.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
websocket-driver@0.7.4
0.7.5

Open the chart page →

9,968
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-54466.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
websocket-driver@0.7.4
0.7.5

Open the chart page →

68,240
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-54466.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
websocket-driver@0.7.4
0.7.5

Open the chart page →

7,413
wekanschmitzis1.1.11 of 1See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-54466.

Container imageDigestPackageFixed in
quay.io/wekan/wekan:v5.65cb17600883a3
websocket-driver@0.7.4
0.7.5

Open the chart page →

3,638
secret-managersecret-managerVerified publisher1.0.01 of 4See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-54466.

Container imageDigestPackageFixed in
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
websocket-driver@0.7.4
0.7.5

Open the chart page →

5,497
dashysergiotocaliniVerified publisher1.0.01 of 1See more

dashy sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54466.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
websocket-driver@0.7.4
0.7.5

Open the chart page →

3,143
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-54466.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
websocket-driver@0.7.4
0.7.5

Open the chart page →

7,574
speedtest-trackersoblivionscall3.0.41 of 1See more

speedtest-tracker soblivionscall 3.0.4

1 of the 1 container images this version deploys carry CVE-2026-54466.

Container imageDigestPackageFixed in
henrywhitaker3/speedtest-tracker:latest47159a940229
websocket-driver@0.6.5
0.7.5

Open the chart page →

2,460
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2026-54466.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
websocket-driver@0.7.4
0.7.5

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54466.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
websocket-driver@0.7.4
0.7.5

Open the chart page →

11,554
fdi-dotstatsuite-dlmstatcan0.3.11 of 1See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-54466.

Container imageDigestPackageFixed in
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
websocket-driver@0.7.4
0.7.5

Open the chart page →

3,881
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-54466.

Container imageDigestPackageFixed in
samajh/alprfrontend:latest05ef4fddbb75
websocket-driver@0.7.4
0.7.5

Open the chart page →

20,270
csmmth-chartsVerified publisher0.1.01 of 3See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-54466.

Container imageDigestPackageFixed in
catalysm/csmm:latestf003b35f54d9
websocket-driver@0.7.0
0.7.5

Open the chart page →

3,576

Container images carrying it

59 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
pantsel/konga:latestc8172b75607d
websocket-driver@0.7.0
0.7.5
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
websocket-driver@0.7.4
0.7.5
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
websocket-driver@0.7.4
0.7.5
3
chatwoot/chatwoot:v3.1.0d530ab8c1753
websocket-driver@0.7.4
0.7.5
2
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
websocket-driver@0.7.4
0.7.5
2
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
websocket-driver@0.7.4
0.7.5
2
apimap/developer:v1.3.1406d3858e20c
websocket-driver@0.7.4
0.7.5
1
apimap/portal:v2.4.0041a4790c65c
websocket-driver@0.7.4
0.7.5
1
arfath29/3-tier-app-frontend:latest384b3e377f47
websocket-driver@0.7.4
0.7.5
1
assistiot/open_api_frontend:1.0.1f11d82defc70
websocket-driver@0.7.4
0.7.5
1
catalysm/csmm:latestf003b35f54d9
websocket-driver@0.7.0
0.7.5
1
ccjacobs14/amazon:59a9b14a6f09e
websocket-driver@0.7.4
0.7.5
1
chatwoot/chatwoot:v4.15.167ebc751c171
websocket-driver@0.7.4
0.7.5
1
coldatom/containers-security-front:latest7c2fbbb41bcf
websocket-driver@0.7.4
0.7.5
1
conduction/conduction-ui-app:devd591f5e6f2a9
websocket-driver@0.7.4
0.7.5
1
countly/api:25.05.4f4cc7447c4f5
websocket-driver@0.7.4
0.7.5
1
countly/countly-server:25.05.4e3c238248f99
websocket-driver@0.7.4
0.7.5
1
countly/frontend:25.05.42acbc11499b6
websocket-driver@0.7.4
0.7.5
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
websocket-driver@0.7.4
0.7.5
1
halkeye/gitter-slack-bridge:v2.0.153eb2b3cd4cb
websocket-driver@0.7.3
0.7.5
1
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
websocket-driver@0.7.4
0.7.5
1
helga09/shoes_ukr:v1.1.17999bc8b77c0
websocket-driver@0.7.4
0.7.5
1
henrywhitaker3/speedtest-tracker:latest47159a940229
websocket-driver@0.6.5
0.7.5
1
ibarreche/cloud-front-ci:latestc8970ac1c8dc
websocket-driver@0.7.4
0.7.5
1
joplin/server:3.0-beta52af57880c0e
websocket-driver@0.7.4
0.7.5
1
joplin/server:2.14.2-betab87564ef34e9
websocket-driver@0.7.4
0.7.5
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
websocket-driver@0.7.4
0.7.5
1
kyleslugg/klusterview:latestba8c36dfdfbd
websocket-driver@0.7.4
0.7.5
1
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
websocket-driver@0.7.4
0.7.5
1
lissy93/dashy:2.0.51991f7be5ed0
websocket-driver@0.7.4
0.7.5
1
matrixdotorg/matrix-appservice-gitter:latest0d37b4d42b47
websocket-driver@0.7.3
0.7.5
1
mautic/mautic:7-apacheeb8cc73d97e1
websocket-driver@0.7.4
0.7.5
1
misskey/misskey:12.110.1e08b7c478093
websocket-driver@0.7.4
0.7.5
1
mitchxxx/amazon:214e72480ec63a
websocket-driver@0.7.4
0.7.5
1
nocodb/nocodb:0.301.5d9516f0bf546
websocket-driver@0.7.4
0.7.5
1
ooghenekaro/amazon:latest03394ba1d6d8
websocket-driver@0.7.4
0.7.5
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
websocket-driver@0.7.4
0.7.5
1
samajh/alprfrontend:latest05ef4fddbb75
websocket-driver@0.7.4
0.7.5
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
websocket-driver@0.7.4
0.7.5
1
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
websocket-driver@0.7.4
0.7.5
1
testhubio/testhub-frontend:on-preme86c2db53be8
websocket-driver@0.7.3
0.7.5
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
websocket-driver@0.7.4
0.7.5
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
websocket-driver@0.7.4
0.7.5
1
vlebediantsev/notes-admin-front:latest007c6670ff48
websocket-driver@0.7.4
0.7.5
1
vlebediantsev/notes-project-front:latest945675fd2636
websocket-driver@0.7.4
0.7.5
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
websocket-driver@0.7.4
0.7.5
1
wekanteam/wekan:v4.2268a51f0327df
websocket-driver@0.6.5
0.7.5
1
winfred008/amazon:910a68de5b398
websocket-driver@0.7.4
0.7.5
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
websocket-driver@0.7.4
0.7.5
1
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
websocket-driver@0.7.4
0.7.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.