StackRadar

CVE-2026-59711

Medium

Advisory

Published 6 Jul 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.003
26th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
24
of 17,781 indexed, latest versions
Container images
19
deployed by those charts
Fix available
None
affected package

showdown metadata title handling allows cross-site scripting

Carried by container images the latest versions of 24 of 17,781 indexed charts deploy, on 19 images.

Affected packageAffected versionsFixed inImages
showdownnpm1.9.1, 2.1.0no fix listed19
OSV records
GHSA-cr32-g25g-vxjj

Charts affected

24 by stars
ChartLatestAffected imagesRadar Score
n8ncommunity-chartsVerified publisher1.24.401 of 1See more

n8n community-charts 1.24.40

1 of the 1 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
n8nio/n8n:2.38.45d9f0cc5672b
showdown@2.1.0
no fix listed

Open the chart page →

772
n8nopen-8gears2.1.11 of 1See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.8cfe2704ff858
showdown@2.1.0
no fix listed

Open the chart page →

1,038
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.14.391e4f0a7feed
showdown@1.9.1
no fix listed

Open the chart page →

11,384
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
showdown@2.1.0
no fix listed

Open the chart page →

5,639
n8nhelmforgeVerified publisher2.0.01 of 2See more

n8n helmforge 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
n8nio/n8n:2.38.45d9f0cc5672b
showdown@2.1.0
no fix listed

Open the chart page →

863
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.11.10c58e7b47bb6
showdown@1.9.1
no fix listed

Open the chart page →

6,168
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.10.0485a0019e5d6
showdown@1.9.1
no fix listed

Open the chart page →

10,530
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
showdown@2.1.0
no fix listed

Open the chart page →

7,776
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
showdown@1.9.1
no fix listed

Open the chart page →

10,730
opensearch-dashboardscaptnbpVerified publisher2.2.11 of 1See more

opensearch-dashboards captnbp 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.15.0b7c26c60bfaf
showdown@1.9.1
no fix listed

Open the chart page →

1,843
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
showdown@2.1.0
no fix listed

Open the chart page →

2,575
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
showdown@1.9.1
no fix listed

Open the chart page →

5,806
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.4.11787550d2358
showdown@1.9.1
no fix listed

Open the chart page →

13,852
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
showdown@1.9.1
no fix listed

Open the chart page →

22,512
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
showdown@1.9.1
no fix listed

Open the chart page →

24,319
automatischhelmforgeVerified publisher1.3.71 of 4See more

automatisch helmforge 1.3.7

1 of the 4 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
automatischio/automatisch:0.15.03bace7a12d5f
showdown@2.1.0
no fix listed

Open the chart page →

5,769
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
showdown@2.1.0
no fix listed

Open the chart page →

5,826
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:1.0.039695180364b
showdown@1.9.1
no fix listed

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:1.0.039695180364b
showdown@1.9.1
no fix listed

Open the chart page →

10,603
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
showdown@2.1.0
no fix listed

Open the chart page →

1,038
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
showdown@2.1.0
no fix listed

Open the chart page →

1,038
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.14.491c8d793746f
showdown@1.9.1
no fix listed

Open the chart page →

5,484
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
showdown@1.9.1
no fix listed

Open the chart page →

5,806
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2026-59711.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.18.00ecd8444add2
showdown@1.9.1
no fix listed

Open the chart page →

9,381

Container images carrying it

19 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
showdown@1.9.1
no fix listed
2
governify/assets-manager:v1.4.12987672448c7
showdown@1.9.1
no fix listed
2
n8nio/n8n:2.36.714c4285bc303
showdown@2.1.0
no fix listed
2
n8nio/n8n:2.38.45d9f0cc5672b
showdown@2.1.0
no fix listed
2
opensearchproject/opensearch-dashboards:1.0.039695180364b
showdown@1.9.1
no fix listed
2
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
showdown@1.9.1
no fix listed
1
automatischio/automatisch:0.15.03bace7a12d5f
showdown@2.1.0
no fix listed
1
n8nio/n8n:2.25.7761374d4eb84
showdown@2.1.0
no fix listed
1
n8nio/n8n:1.86.08b39ed5a2de9
showdown@2.1.0
no fix listed
1
n8nio/n8n:0.212.0a9195bc499a3
showdown@2.1.0
no fix listed
1
n8nio/n8n:2.36.8cfe2704ff858
showdown@2.1.0
no fix listed
1
n8nio/n8n:1.33.1dd171d45102a
showdown@2.1.0
no fix listed
1
opensearchproject/opensearch-dashboards:2.18.00ecd8444add2
showdown@1.9.1
no fix listed
1
opensearchproject/opensearch-dashboards:2.10.0485a0019e5d6
showdown@1.9.1
no fix listed
1
opensearchproject/opensearch-dashboards:2.15.0b7c26c60bfaf
showdown@1.9.1
no fix listed
1
wazuh/wazuh-dashboard:4.11.10c58e7b47bb6
showdown@1.9.1
no fix listed
1
wazuh/wazuh-dashboard:4.4.11787550d2358
showdown@1.9.1
no fix listed
1
wazuh/wazuh-dashboard:4.14.491c8d793746f
showdown@1.9.1
no fix listed
1
wazuh/wazuh-dashboard:4.14.391e4f0a7feed
showdown@1.9.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.