StackRadar

CVE-2026-59724

High

Advisory

Published 31 Aug 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
44
of 17,781 indexed, latest versions
Container images
38
deployed by those charts
Fix available
1 of 1
affected package

Socket.IO: Engine.IO WebTransport SID DoS

Carried by container images the latest versions of 44 of 17,781 indexed charts deploy, on 38 images.

Affected packageAffected versionsFixed inImages
engine.ionpm6.5.1, 6.5.2, 6.5.4, 6.5.5+5 more6.6.738
OSV records
GHSA-gr94-w7qr-f4j3

Charts affected

44 by stars
ChartLatestAffected imagesRadar Score
stacks-blockchain-apihirosystemsVerified publisher6.5.11 of 5See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
engine.io@6.6.1
6.6.7

Open the chart page →

8,364
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
engine.io@6.6.2
6.6.7

Open the chart page →

5,352
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
engine.io@6.6.4
6.6.7

Open the chart page →

30,326
docmosthelmforgeVerified publisher1.2.111 of 4See more

docmost helmforge 1.2.11

1 of the 4 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
docmost/docmost:0.95.041c8d777cf23
engine.io@6.6.2
6.6.7

Open the chart page →

5,564
redisinsightredisinsight-guiVerified publisher1.3.51 of 1See more

redisinsight redisinsight-gui 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
redis/redisinsight:3.8b5e19ee240ab
engine.io@6.6.2
6.6.7

Open the chart page →

1,038
redisinsight-secureredisinsight-secureVerified publisher1.0.21 of 1See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
redis/redisinsight:2.68019fcf774631
engine.io@6.6.2
6.6.7

Open the chart page →

1,721
kubeviouskubevious1.2.22 of 7See more

kubevious kubevious 1.2.2

2 of the 7 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
kubevious/backend:1.2.22d9ba6eb46b6
engine.io@6.5.1
6.6.7
kubevious/collector:1.2.1f58226f9d84e
engine.io@6.5.1
6.6.7

Open the chart page →

14,204
activepiecesmeyerchartsVerified publisher0.1.61 of 1See more

activepieces meyercharts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
activepieces/activepieces:0.23.0c26188b44e62
engine.io@6.5.4
6.6.7

Open the chart page →

2,635
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
engine.io@6.6.6
6.6.7

Open the chart page →

4,016
maildevchristianhuthVerified publisher1.6.01 of 1See more

maildev christianhuth 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
maildev/maildev:2.2.1180ef51f65ee
engine.io@6.5.5
6.6.7

Open the chart page →

1,143
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
engine.io@6.6.4
6.6.7

Open the chart page →

15,712
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
engine.io@6.6.4
6.6.7

Open the chart page →

6,883
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
engine.io@6.6.5
6.6.7

Open the chart page →

7,035
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
engine.io@6.6.4
6.6.7

Open the chart page →

38,107
activepiecesadnoctemVerified publisher0.5.01 of 1See more

activepieces adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
activepieces/activepieces:0.90.430c10a04fe3d
engine.io@6.5.5
6.6.7

Open the chart page →

1,055
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:api-latest7473d77448e1
engine.io@6.5.4
6.6.7

Open the chart page →

9,369
audiobookshelfbdclark-helm-chartsVerified publisher0.1.41 of 1See more

audiobookshelf bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
engine.io@6.5.4
6.6.7

Open the chart page →

1,722
audiobookshelfcharts-derwitt-devVerified publisher1.1.01 of 1See more

audiobookshelf charts-derwitt-dev 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
engine.io@6.5.4
6.6.7

Open the chart page →

1,722
audiobookshelfchristianhuthVerified publisher2.4.01 of 1See more

audiobookshelf christianhuth 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
engine.io@6.5.4
6.6.7

Open the chart page →

1,722
clusterplexclusterplexVerified publisher1.1.101 of 3See more

clusterplex clusterplex 1.1.10

1 of the 3 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
engine.io@6.5.2
6.6.7

Open the chart page →

3,868
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
engine.io@6.6.2
6.6.7

Open the chart page →

22,193
hedgedocernail-hedgedoc5.0.01 of 1See more

hedgedoc ernail-hedgedoc 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
engine.io@6.6.6
6.6.7

Open the chart page →

1,755
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
engine.io@6.6.4
6.6.7

Open the chart page →

3,474
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
engine.io@6.5.2
6.6.7

Open the chart page →

9,019
croniclehelmforgeVerified publisher1.1.101 of 1See more

cronicle helmforge 1.1.10

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
soulteary/cronicle:0.9.80ac2512fa6e39
engine.io@6.6.4
6.6.7

Open the chart page →

1,271
audiobookshelfk8s-home-lab-repo2.0.11 of 1See more

audiobookshelf k8s-home-lab-repo 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
engine.io@6.5.4
6.6.7

Open the chart page →

2,350
zwave-js-uik8sonlabVerified publisher0.7.121 of 1See more

zwave-js-ui k8sonlab 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
zwavejs/zwave-js-ui:11.22.314d018bb689e
engine.io@6.6.4
6.6.7

Open the chart page →

973
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
engine.io@6.6.2
6.6.7

Open the chart page →

1,290
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
engine.io@6.5.5
6.6.7

Open the chart page →

9,098
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
engine.io@6.6.5
6.6.7

Open the chart page →

6,356
redisinsightlogic3579Verified publisher3.4.01 of 1See more

redisinsight logic3579 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
redis/redisinsight:3.485562d67a912
engine.io@6.6.2
6.6.7

Open the chart page →

1,490
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
ghcr.io/rodg/nodecg-base:latest31be4bf87070
engine.io@6.5.4
6.6.7

Open the chart page →

7,315
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
engine.io@6.5.2
6.6.7

Open the chart page →

4,560
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
engine.io@6.6.2
6.6.7

Open the chart page →

4,219
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
engine.io@6.6.2
6.6.7

Open the chart page →

1,038
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
engine.io@6.5.1
6.6.7

Open the chart page →

1,884
audiobookshelfrubxkubeVerified publisher0.1.31 of 1See more

audiobookshelf rubxkube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
engine.io@6.5.4
6.6.7

Open the chart page →

1,722
etherpadschoenwald0.3.01 of 1See more

etherpad schoenwald 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
etherpad/etherpad:2.7.2b723fe5f2594
engine.io@6.6.6
6.6.7

Open the chart page →

2,133
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
engine.io@6.5.1
6.6.7

Open the chart page →

39,090
redis-vector-dbtest-opea1.0.01 of 1See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
engine.io@6.5.1
6.6.7

Open the chart page →

5,604
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
engine.io@6.6.2
6.6.7

Open the chart page →

4,661
excalidashunxwaresVerified publisher2026.2.51 of 2See more

excalidash unxwares 2026.2.5

1 of the 2 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.4.271273af713c91
engine.io@6.6.4
6.6.7

Open the chart page →

2,620
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
engine.io@6.6.4
6.6.7

Open the chart page →

3,746
vote-appvote-appVerified publisher1.0.71 of 6See more

vote-app vote-app 1.0.7

1 of the 6 container images this version deploys carry CVE-2026-59724.

Container imageDigestPackageFixed in
thecloudspark/app-result:1.09a5302cb8312
engine.io@6.5.4
6.6.7

Open the chart page →

3,031

Container images carrying it

38 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
redis/redisinsight:3.8:latestb5e19ee240ab
engine.io@6.6.2
6.6.7
4
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
engine.io@6.5.4
6.6.7
4
redis/redis-stack:7.2.0-v91c5f43fddcdd
engine.io@6.5.1
6.6.7
2
activepieces/activepieces:0.90.430c10a04fe3d
engine.io@6.5.5
6.6.7
1
activepieces/activepieces:0.23.0c26188b44e62
engine.io@6.5.4
6.6.7
1
assistiot/fl_orchestrator:api-latest7473d77448e1
engine.io@6.5.4
6.6.7
1
chocobozzz/peertube:v8.1.5052712130691
engine.io@6.6.5
6.6.7
1
docmost/docmost:0.95.041c8d777cf23
engine.io@6.6.2
6.6.7
1
etherpad/etherpad:2.7.2b723fe5f2594
engine.io@6.6.6
6.6.7
1
evoapicloud/evolution-api:latest966625532d90
engine.io@6.6.4
6.6.7
1
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
engine.io@6.6.1
6.6.7
1
kubevious/backend:1.2.22d9ba6eb46b6
engine.io@6.5.1
6.6.7
1
kubevious/collector:1.2.1f58226f9d84e
engine.io@6.5.1
6.6.7
1
library/ghost:5.79.083f7bf209844
engine.io@6.5.2
6.6.7
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
engine.io@6.6.5
6.6.7
1
louislam/uptime-kuma:13d632903e6af
engine.io@6.6.4
6.6.7
1
louislam/uptime-kuma:2.0.24c364ef96aad
engine.io@6.6.4
6.6.7
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
engine.io@6.6.4
6.6.7
1
maildev/maildev:2.2.1180ef51f65ee
engine.io@6.5.5
6.6.7
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
engine.io@6.5.2
6.6.7
1
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
engine.io@6.6.4
6.6.7
1
nocodb/nocodb:0.258.06779a4ddedf2
engine.io@6.6.2
6.6.7
1
nocodb/nocodb:0.301.5d9516f0bf546
engine.io@6.6.6
6.6.7
1
outlinewiki/outline:0.82.0494dfb9249a6
engine.io@6.6.2
6.6.7
1
redis/redisinsight:2.68019fcf774631
engine.io@6.6.2
6.6.7
1
redis/redisinsight:3.2.055542a762210
engine.io@6.6.2
6.6.7
1
redis/redisinsight:2.46699d341bd329
engine.io@6.5.1
6.6.7
1
redis/redisinsight:3.485562d67a912
engine.io@6.6.2
6.6.7
1
soulteary/cronicle:0.9.80ac2512fa6e39
engine.io@6.6.4
6.6.7
1
thecloudspark/app-result:1.09a5302cb8312
engine.io@6.5.4
6.6.7
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
engine.io@6.5.5
6.6.7
1
zimengxiong/excalidash-backend:0.4.271273af713c91
engine.io@6.6.4
6.6.7
1
zwavejs/zwave-js-ui:11.22.314d018bb689e
engine.io@6.6.4
6.6.7
1
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
engine.io@6.5.4
6.6.7
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
engine.io@6.6.4
6.6.7
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
engine.io@6.5.2
6.6.7
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
engine.io@6.5.4
6.6.7
1
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
engine.io@6.6.6
6.6.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.