StackRadar

CVE-2026-54490

Medium

Advisory

Published 15 Jul 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
66
of 17,781 indexed, latest versions
Container images
59
deployed by those charts
Fix available
1 of 1
affected package

websocket-driver: Resource limit bypass via message compression

Carried by container images the latest versions of 66 of 17,781 indexed charts deploy, on 59 images.

Affected packageAffected versionsFixed inImages
websocket-drivernpm0.6.5, 0.7.0, 0.7.3, 0.7.40.7.559
OSV records
GHSA-mp7j-qc5w-4988

Charts affected

66 by stars
ChartLatestAffected imagesRadar Score
lemmyananace-chartsVerified publisher0.6.151 of 5See more

lemmy ananace-charts 0.6.15

1 of the 5 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
dessalines/lemmy-ui:0.19.20ee4c620d8e93
websocket-driver@0.7.4
0.7.5

Open the chart page →

7,210
chatwootchatwootVerified publisher2.0.241 of 3See more

chatwoot chatwoot 2.0.24

1 of the 3 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v4.15.167ebc751c171
websocket-driver@0.7.4
0.7.5

Open the chart page →

9,203
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
websocket-driver@0.7.4
0.7.5

Open the chart page →

5,251
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
kyleslugg/klusterview:latestba8c36dfdfbd
websocket-driver@0.7.4
0.7.5

Open the chart page →

3,795
librechatlibrechat1.8.101 of 3See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
websocket-driver@0.7.4
0.7.5

Open the chart page →

2,654
kongakonga1.1.01 of 1See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
websocket-driver@0.7.0
0.7.5

Open the chart page →

5,209
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
kobotoolbox/kpi:2.022.24dbcacc01bccd4
websocket-driver@0.7.4
0.7.5

Open the chart page →

18,517
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
websocket-driver@0.7.4
0.7.5

Open the chart page →

4,016
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
ghcr.io/data-fair/notify:3c739b74dabb0
websocket-driver@0.7.4
0.7.5

Open the chart page →

38,346
joplin-serverdjjudas21Verified publisher5.5.81 of 1See more

joplin-server djjudas21 5.5.8

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
joplin/server:2.14.2-betab87564ef34e9
websocket-driver@0.7.4
0.7.5

Open the chart page →

3,925
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
websocket-driver@0.7.4
0.7.5

Open the chart page →

5,670
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
websocket-driver@0.7.4
0.7.5

Open the chart page →

7,801
dashykrzwiatrzyk1.0.01 of 1See more

dashy krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
websocket-driver@0.7.4
0.7.5

Open the chart page →

3,143
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
websocket-driver@0.7.4
0.7.5

Open the chart page →

5,940
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
websocket-driver@0.7.3
0.7.5

Open the chart page →

7,517
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
websocket-driver@0.7.4
0.7.5

Open the chart page →

12,581
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
websocket-driver@0.7.4
0.7.5

Open the chart page →

3,437
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
websocket-driver@0.7.4
0.7.5

Open the chart page →

3,237
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
websocket-driver@0.7.4
0.7.5

Open the chart page →

2,353
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
websocket-driver@0.7.4
0.7.5

Open the chart page →

2,396
openapiassist-iot-open-api-management0.2.22 of 6See more

openapi assist-iot-open-api-management 0.2.2

2 of the 6 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
websocket-driver@0.7.4
0.7.5
pantsel/konga:latestc8172b75607d
websocket-driver@0.7.0
0.7.5

Open the chart page →

18,277
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
websocket-driver@0.7.4
0.7.5
countly/frontend:25.05.42acbc11499b6
websocket-driver@0.7.4
0.7.5

Open the chart page →

7,295
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
websocket-driver@0.7.3
0.7.5

Open the chart page →

25,456
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
websocket-driver@0.7.4
0.7.5

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
websocket-driver@0.7.4
0.7.5

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
websocket-driver@0.7.4
0.7.5

Open the chart page →

5,141
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
websocket-driver@0.7.4
0.7.5

Open the chart page →

12,907
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
coldatom/containers-security-front:latest7c2fbbb41bcf
websocket-driver@0.7.4
0.7.5

Open the chart page →

9,146
kongacreate-databases0.1.01 of 1See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
websocket-driver@0.7.0
0.7.5

Open the chart page →

5,209
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
websocket-driver@0.7.4
0.7.5

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
websocket-driver@0.7.4
0.7.5

Open the chart page →

68,240
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
websocket-driver@0.7.4
0.7.5

Open the chart page →

3,744
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
websocket-driver@0.6.5
0.7.5

Open the chart page →

5,941
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
websocket-driver@0.7.4
0.7.5

Open the chart page →

2,950
gitter-irc-bridgehalkeye0.1.11 of 1See more

gitter-irc-bridge halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
halkeye/gitter-slack-bridge:v2.0.153eb2b3cd4cb
websocket-driver@0.7.3
0.7.5

Open the chart page →

3,642
matrix-appservice-gitterhalkeye0.1.01 of 1See more

matrix-appservice-gitter halkeye 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
matrixdotorg/matrix-appservice-gitter:latest0d37b4d42b47
websocket-driver@0.7.3
0.7.5

Open the chart page →

3,003
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
websocket-driver@0.7.4
0.7.5

Open the chart page →

18,813
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
websocket-driver@0.7.4
0.7.5

Open the chart page →

3,407
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
websocket-driver@0.7.4
0.7.5

Open the chart page →

11,812
kubevismario-fVerified publisher2.0.11 of 1See more

kubevis mario-f 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
websocket-driver@0.7.4
0.7.5

Open the chart page →

5,287
mauticmautic-chartVerified publisher1.0.21 of 3See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
mautic/mautic:7-apacheeb8cc73d97e1
websocket-driver@0.7.4
0.7.5

Open the chart page →

8,303
maxcrm-chartsmaxcrm-chartsVerified publisher1.1.2011 of 4See more

maxcrm-charts maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
websocket-driver@0.7.4
0.7.5

Open the chart page →

5,940
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
websocket-driver@0.6.5
0.7.5

Open the chart page →

6,438
myawesomeappmyawesomapp-mitchxxx0.1.11 of 1See more

myawesomeapp myawesomapp-mitchxxx 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
mitchxxx/amazon:214e72480ec63a
websocket-driver@0.7.4
0.7.5

Open the chart page →

2,116
myawesomeapp14myawesomeapp140.1.11 of 1See more

myawesomeapp14 myawesomeapp14 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
ccjacobs14/amazon:59a9b14a6f09e
websocket-driver@0.7.4
0.7.5

Open the chart page →

2,116
myawesomeapp-janmyawesomeapp-jan0.1.11 of 1See more

myawesomeapp-jan myawesomeapp-jan 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
ooghenekaro/amazon:latest03394ba1d6d8
websocket-driver@0.7.4
0.7.5

Open the chart page →

2,144
myawesomeapp-marmyawesomeapp-mar0.1.11 of 1See more

myawesomeapp-mar myawesomeapp-mar 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
winfred008/amazon:910a68de5b398
websocket-driver@0.7.4
0.7.5

Open the chart page →

2,116
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
websocket-driver@0.7.4
0.7.5

Open the chart page →

17,929
dashynas-helm-chartsVerified publisher1.0.41 of 1See more

dashy nas-helm-charts 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
lissy93/dashy:2.0.51991f7be5ed0
websocket-driver@0.7.4
0.7.5

Open the chart page →

3,269
smilencsaVerified publisher1.1.01 of 23See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2026-54490.

Container imageDigestPackageFixed in
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
websocket-driver@0.7.4
0.7.5

Open the chart page →

109,294

Container images carrying it

59 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/data-fair/notify:3c739b74dabb0
websocket-driver@0.7.4
0.7.5
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
websocket-driver@0.7.4
0.7.5
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
websocket-driver@0.7.4
0.7.5
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
websocket-driver@0.7.4
0.7.5
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
websocket-driver@0.7.4
0.7.5
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
websocket-driver@0.7.4
0.7.5
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
websocket-driver@0.7.3
0.7.5
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
websocket-driver@0.6.5
0.7.5
1
quay.io/wekan/wekan:v5.65cb17600883a3
websocket-driver@0.7.4
0.7.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.