StackRadar

CVE-2026-59725

High

Advisory

Published 20 Jul 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
66
of 17,781 indexed, latest versions
Container images
60
deployed by those charts
Fix available
1 of 1
affected package

Socket.IO: Engine.IO Polling Transport Connection Exhaustion

Carried by container images the latest versions of 66 of 17,781 indexed charts deploy, on 60 images.

Affected packageAffected versionsFixed inImages
engine.ionpm4.1.1, 4.1.2, 5.0.0, 5.1.0+16 more6.6.760
OSV records
GHSA-r635-g3xr-vw7x

Charts affected

66 by stars
ChartLatestAffected imagesRadar Score
stacks-blockchain-apihirosystemsVerified publisher6.5.11 of 5See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
engine.io@6.6.1
6.6.7

Open the chart page →

8,364
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
engine.io@6.2.1
6.6.7

Open the chart page →

4,431
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
engine.io@6.6.2
6.6.7

Open the chart page →

5,352
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
engine.io@6.6.4
6.6.7

Open the chart page →

30,326
uptime-kumaduyet0.1.71 of 1See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
engine.io@6.1.3
6.6.7

Open the chart page →

4,515
docmosthelmforgeVerified publisher1.2.111 of 4See more

docmost helmforge 1.2.11

1 of the 4 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
docmost/docmost:0.95.041c8d777cf23
engine.io@6.6.2
6.6.7

Open the chart page →

5,564
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
engine.io@6.4.1
6.6.7

Open the chart page →

2,828
redisinsightredisinsight-guiVerified publisher1.3.51 of 1See more

redisinsight redisinsight-gui 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
redis/redisinsight:3.8b5e19ee240ab
engine.io@6.6.2
6.6.7

Open the chart page →

1,038
redisinsight-secureredisinsight-secureVerified publisher1.0.21 of 1See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
redis/redisinsight:2.68019fcf774631
engine.io@6.6.2
6.6.7

Open the chart page →

1,721
nightscoutgabe565Verified publisher0.13.01 of 2See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
engine.io@6.2.1
6.6.7

Open the chart page →

2,521
audiobookshelfgeek-cookbookVerified publisher1.2.21 of 1See more

audiobookshelf geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.0.3140aed2752c3
engine.io@6.1.3
6.6.7

Open the chart page →

1,959
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
engine.io@4.1.1
6.6.7

Open the chart page →

22,773
zwavejs2mqttgeek-cookbookVerified publisher5.4.21 of 1See more

zwavejs2mqtt geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
engine.io@5.1.0
6.6.7

Open the chart page →

3,476
kubeviouskubevious1.2.23 of 7See more

kubevious kubevious 1.2.2

3 of the 7 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
kubevious/backend:1.2.22d9ba6eb46b6
engine.io@6.5.1
6.6.7
kubevious/collector:1.2.1f58226f9d84e
engine.io@6.5.1
6.6.7
kubevious/guard:1.2.19bf567704de2
engine.io@6.1.3
6.6.7

Open the chart page →

14,204
activepiecesmeyerchartsVerified publisher0.1.61 of 1See more

activepieces meyercharts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
activepieces/activepieces:0.23.0c26188b44e62
engine.io@6.5.4
6.6.7

Open the chart page →

2,635
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
engine.io@6.6.6
6.6.7

Open the chart page →

4,016
maildevchristianhuthVerified publisher1.6.01 of 1See more

maildev christianhuth 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
maildev/maildev:2.2.1180ef51f65ee
engine.io@6.5.5
6.6.7

Open the chart page →

1,143
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
engine.io@6.1.3
6.6.7

Open the chart page →

15,653
magic-mirrorgeek-cookbookVerified publisher4.4.21 of 1See more

magic-mirror geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
engine.io@5.0.0
6.6.7

Open the chart page →

4,405
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
engine.io@6.1.3
6.6.7

Open the chart page →

5,079
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
engine.io@6.4.2
6.6.7

Open the chart page →

4,196
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
engine.io@6.6.4
6.6.7

Open the chart page →

15,712
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
engine.io@6.6.4
6.6.7

Open the chart page →

6,883
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
engine.io@6.6.5
6.6.7

Open the chart page →

7,035
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
engine.io@6.6.4
6.6.7

Open the chart page →

38,107
activepiecesadnoctemVerified publisher0.5.01 of 1See more

activepieces adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
activepieces/activepieces:0.90.430c10a04fe3d
engine.io@6.5.5
6.6.7

Open the chart page →

1,055
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:api-latest7473d77448e1
engine.io@6.5.4
6.6.7

Open the chart page →

9,369
audiobookshelfbdclark-helm-chartsVerified publisher0.1.41 of 1See more

audiobookshelf bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
engine.io@6.5.4
6.6.7

Open the chart page →

1,722
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
engine.io@6.2.0
6.6.7

Open the chart page →

4,455
audiobookshelfcharts-derwitt-devVerified publisher1.1.01 of 1See more

audiobookshelf charts-derwitt-dev 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
engine.io@6.5.4
6.6.7

Open the chart page →

1,722
audiobookshelfchristianhuthVerified publisher2.4.01 of 1See more

audiobookshelf christianhuth 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
engine.io@6.5.4
6.6.7

Open the chart page →

1,722
clusterplexclusterplexVerified publisher1.1.101 of 3See more

clusterplex clusterplex 1.1.10

1 of the 3 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
engine.io@6.5.2
6.6.7

Open the chart page →

3,868
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
engine.io@5.1.1
6.6.7

Open the chart page →

3,769
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
engine.io@6.6.2
6.6.7

Open the chart page →

22,193
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
engine.io@6.4.2
6.6.7

Open the chart page →

4,217
reddarkemmas-chartsVerified publisher0.0.21 of 1See more

reddark emmas-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
ghcr.io/0xemma/reddark:main2a115e991894
engine.io@6.4.2
6.6.7

Open the chart page →

1,998
hedgedocernail-hedgedoc5.0.01 of 1See more

hedgedoc ernail-hedgedoc 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
engine.io@6.6.6
6.6.7

Open the chart page →

1,755
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
engine.io@6.6.4
6.6.7

Open the chart page →

3,474
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
engine.io@6.0.0
6.6.7

Open the chart page →

12,222
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
engine.io@6.5.2
6.6.7

Open the chart page →

9,019
theloungehalkeye4.3.11 of 1See more

thelounge halkeye 4.3.1

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
thelounge/thelounge:4.3.0-alpine0037aa258261
engine.io@4.1.2
6.6.7

Open the chart page →

1,938
croniclehelmforgeVerified publisher1.1.101 of 1See more

cronicle helmforge 1.1.10

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
soulteary/cronicle:0.9.80ac2512fa6e39
engine.io@6.6.4
6.6.7

Open the chart page →

1,271
audiobookshelfk8s-home-lab-repo2.0.11 of 1See more

audiobookshelf k8s-home-lab-repo 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
engine.io@6.5.4
6.6.7

Open the chart page →

2,350
zwave-js-uik8sonlabVerified publisher0.7.121 of 1See more

zwave-js-ui k8sonlab 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
zwavejs/zwave-js-ui:11.22.314d018bb689e
engine.io@6.6.4
6.6.7

Open the chart page →

973
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
engine.io@6.6.2
6.6.7

Open the chart page →

1,290
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
engine.io@6.5.5
6.6.7

Open the chart page →

9,098
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
engine.io@6.6.5
6.6.7

Open the chart page →

6,356
redisinsightlogic3579Verified publisher3.4.01 of 1See more

redisinsight logic3579 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
redis/redisinsight:3.485562d67a912
engine.io@6.6.2
6.6.7

Open the chart page →

1,490
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
ghcr.io/rodg/nodecg-base:latest31be4bf87070
engine.io@6.5.4
6.6.7

Open the chart page →

7,315
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-59725.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
engine.io@6.5.2
6.6.7

Open the chart page →

4,560

Container images carrying it

60 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
engine.io@5.1.0
6.6.7
1
zwavejs/zwave-js-ui:11.22.314d018bb689e
engine.io@6.6.4
6.6.7
1
ghcr.io/0xemma/reddark:main2a115e991894
engine.io@6.4.2
6.6.7
1
ghcr.io/advplyr/audiobookshelf:2.0.3140aed2752c3
engine.io@6.1.3
6.6.7
1
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
engine.io@6.5.4
6.6.7
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
engine.io@6.6.4
6.6.7
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
engine.io@6.1.3
6.6.7
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
engine.io@6.5.2
6.6.7
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
engine.io@6.5.4
6.6.7
1
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
engine.io@6.6.6
6.6.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.