CVE-2026-67213
MediumAdvisory
Published 29 Jul 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.9
- base score, highest
- EPSS
- 0.003
- 25th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 311
- of 17,781 indexed, latest versions
- Container images
- 322
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
nanoid: custom generators can loop indefinitely when size is zero
Carried by container images the latest versions of 311 of 17,781 indexed charts deploy, on 322 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| nanoidnpm | 2.1.11, 3.1.12, 3.1.16, 3.1.20+25 more | 3.3.18, 5.1.6 | 322 |
| node-postcssdeb | 8.4.31+~cs8.0.26-1 | no fix listed | 1 |
- OSV records
- GHSA-2v37-7h3g-55p8UBUNTU-CVE-2026-67213
Charts affected
311 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| hive-appgraphql-hive-subcharts | 1.0.0 | 1 of 1See more | 2,682 |
| h2ph2pVerified publisher | 1.0.1 | 1 of 1See more | 1,713 |
| librechathajowielandVerified publisher | 1.1.0 | 1 of 1See more | 2,950 |
| web-checkhajowielandVerified publisher | 1.0.1 | 1 of 1See more | 9,047 |
| lobe-chathelm-charts-darox | 0.1.56 | 1 of 1See more | 666 |
| hoppscotchhelm-charts-nr | 0.3.1 | 1 of 1See more | 3,451 |
| automatischhelmforgeVerified publisher | 1.3.7 | 1 of 4See more | 5,769 |
| countlyhelmforgeVerified publisher | 1.2.6 | 1 of 3See more | 18,813 |
| immichhelmforgeVerified publisher | 1.2.8 | 1 of 5See more | 11,042 |
| paprahelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 2,538 |
| ryothelmforgeVerified publisher | 1.0.0 | 1 of 2See more | 6,012 |
| openbashelm-openbasVerified publisher | 1.8.14 | 1 of 7See more | 25,017 |
| self-learning-platformhelm-self-learning-platformVerified publisher | 1.1.0 | 1 of 1See more | 1,468 |
| wikijshomeenterpriseinc | 1.4.0 | 1 of 1See more | 4,253 |
| hoppscotchhoppscotch | 0.1.1 | 1 of 1See more | 3,614 |
| townsquarehuscker-chartsVerified publisher | 1.0.4 | 1 of 2See more | 3,407 |
| ilum-unity-catalogilumVerified publisher | 0.1.0 | 1 of 4See more | 11,812 |
| dtlinfradao | 0.0.1 | 1 of 1See more | 4,944 |
| interbtc-hydrainterlay | 0.1.15 | 2 of 4See more | 6,831 |
| keyoxide-webittrident-oss | 0.2.3 | 1 of 1See more | 2,363 |
| ghostjanip81-helm-chartsVerified publisher | 0.1.2 | 1 of 1See more | 3,436 |
| n8njanip81-helm-chartsVerified publisher | 0.1.4 | 1 of 1See more | 5,826 |
| annotation-tooljtektVerified publisher | 0.1.5 | 1 of 2See more | 2,315 |
| image-storage-servicejtektVerified publisher | 0.4.3 | 1 of 4See more | 22,589 |
| polygonal-annotation-tooljtektVerified publisher | 0.1.5 | 1 of 2See more | 2,231 |
| shinsei-managerjtektVerified publisher | 0.2.0 | 4 of 8See more | 63,461 |
| time-series-storagejtektVerified publisher | 0.1.10 | 1 of 2See more | 16,600 |
| ghostk8s-home-lab-repo | 4.1.0 | 1 of 1See more | 3,092 |
| youtubedl-materialk8s-home-lab-repo | 5.1.1 | 1 of 1See more | 9,783 |
| kenerkener-chart | 0.0.7 | 1 of 1See more | 5,228 |
| cdashkitwareVerified publisher | 0.19.0 | 1 of 3See more | 12,062 |
| ohmyformkrzwiatrzyk | 0.0.1 | 1 of 1See more | 4,230 |
| pangolinkrzwiatrzyk | 0.11.0 | 1 of 1See more | 3,441 |
| tooljetkrzwiatrzyk | 1.1.1 | 1 of 2See more | 5,410 |
| component-storekubebb | 0.0.23 | 1 of 1See more | 2,178 |
| u4a-componentkubebb | 0.2.10 | 1 of 8See more | 13,819 |
| aperagkubeblocksVerified publisher | 0.0.0-nightly | 1 of 3See more | 8,405 |
| ghostkubernetes-homelab-helm-chartsVerified publisher | 0.1.2 | 1 of 2See more | 2,756 |
| homepagekubernetes-homelab-helm-chartsVerified publisher | 0.1.0 | 1 of 1See more | 1,378 |
| portfolio-trackerkubernetes-homelab-helm-chartsVerified publisher | 0.1.0 | 1 of 3See more | 1,498 |
| seerrkubernetes-homelab-helm-chartsVerified publisher | 0.1.2 | 1 of 1See more | 2,548 |
| uptime-kumakubernetes-homelab-helm-chartsVerified publisher | 0.1.2 | 1 of 1See more | 6,356 |
| kubevious-agentkubevious | 1.0.4 | 1 of 1See more | 1,927 |
| workload-operatorkubevious | 0.0.3 | 1 of 1See more | 2,008 |
| kyso-frontkyso | 1.0.0 | 1 of 1See more | 2,685 |
| jellyseerrlbenicio-communityVerified publisher | 0.1.0 | 1 of 1See more | 3,555 |
| uptime-kumalbenicio-communityVerified publisher | 0.1.1 | 1 of 1See more | 33,242 |
| dashboardleechistest | 1.0.0 | 1 of 1See more | 1,344 |
| uptime-kumaloeken-at-homeVerified publisher | 2.3.2 | 1 of 1See more | 33,242 |
| logtidelogtideVerified publisher | 2.1.14 | 2 of 4See more | 2,774 |
Container images carrying it
322 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| kubevious/ | f58226f9d84e | nanoid | 3.3.18 | 1 |
| kubevious/ | 9bf567704de2 | nanoid | 3.3.18 | 1 |
| kubevious/ | 1acf1a1f0b47 | nanoid | 3.3.18 | 1 |
| kubevious/ | 99ae7a5168c2 | nanoid | 3.3.18 | 1 |
| kubevious/ | 0b0f4c507eb6 | nanoid | 3.3.18 | 1 |
| kyleslugg/ | ba8c36dfdfbd | nanoid | 3.3.18 | 1 |
| kyso/ | e52595c5c16f | nanoid | 3.3.18 | 1 |
| laly9999/ | 75ae77a20c6c | nanoid | 3.3.18 | 1 |
| langgenius/ | a2a294743634 | nanoid | 3.3.18 | 1 |
| langgenius/ | c306ac577912 | nanoid | 3.3.18 | 1 |
| langgenius/ | d64914ff0d6d | nanoid | 3.3.18 | 1 |
| lavandadelpatio/ | 501c3f31e0bc | nanoid | 3.3.18 | 1 |
| leonardomulticloud/ | e42a341e0299 | nanoid | 3.3.18 | 1 |
| library/ | 1ef2e532ca4d | nanoid | 3.3.18 | 1 |
| library/ | 2654b1e90413 | nanoid | 3.3.18 | 1 |
| library/ | 29773d6be407 | nanoid | 3.3.18 | 1 |
| library/ | 767230c0f263 | nanoid | 3.3.18 | 1 |
| library/ | 77196da4b0df | nanoid | 3.3.18 | 1 |
| library/ | 83f7bf209844 | nanoid | 3.3.18 | 1 |
| library/ | ac533a6988ee | nanoid | 3.3.18 | 1 |
| library/ | 04c0fc150f3a | nanoid | 3.3.18 | 1 |
| linuxserver/ | b801bbcf6386 | nanoid | 3.3.18 | 1 |
| linuxserver/ | 6108ed066d4a | nanoid | 3.3.18 | 1 |
| lobehub/ | da0c21fefcd3 | nanoid | 3.3.18 | 1 |
| louislam/ | 059b49d64739 | nanoid | 3.3.18 | 1 |
| louislam/ | 0b55bcb83a1c | nanoid | 3.3.18 | 1 |
| louislam/ | 3d632903e6af | nanoid | 3.3.18 | 1 |
| louislam/ | 4c364ef96aad | nanoid | 3.3.18 | 1 |
| louislam/ | 91e963bfda56 | nanoid | 3.3.18 | 1 |
| louislam/ | 96510915e6be | nanoid | 3.3.18 | 1 |
| louislam/ | 9865163f92c1 | nanoid | 3.3.18 | 1 |
| louislam/ | a4eab252e5a2 | nanoid | 3.3.18 | 1 |
| louislam/ | bc6f244ecf27 | nanoid | 3.3.18 | 1 |
| lsstsqre/ | 9ded78e7fe03 | nanoid | 3.3.18 | 1 |
| ltdstudio/ | 0e76c6f4eac0 | nanoid | 3.3.18 | 1 |
| mautic/ | eb8cc73d97e1 | nanoid | 3.3.18 | 1 |
| misskey/ | e08b7c478093 | nanoid | 3.3.18 | 1 |
| mitchxxx/ | 4e72480ec63a | nanoid | 3.3.18 | 1 |
| moonrailgun/ | b528c8f8fcc4 | nanoid | 5.1.6 | 1 |
| moreillon/ | 3739ef6956b5 | nanoid | 3.3.18 | 1 |
| moreillon/ | d7d4a5463525 | nanoid | 3.3.18 | 1 |
| moreillon/ | c1072f4ab6aa | nanoid | 3.3.18 | 1 |
| moreillon/ | 3caa8f710ee0 | nanoid | 3.3.18 | 1 |
| moreillon/ | d2ee0423b797 | nanoid | 3.3.18 | 1 |
| mpopoola1/ | 061fc532de7d | nanoid | 3.3.18 | 1 |
| n8nio/ | 761374d4eb84 | nanoid | 3.3.18 | 1 |
| n8nio/ | 8b39ed5a2de9 | nanoid | 3.3.18 | 1 |
| n8nio/ | a9195bc499a3 | nanoid | 3.3.18 | 1 |
| n8nio/ | dd171d45102a | nanoid | 3.3.18 | 1 |
| netrisai/ | 6e865080e86c | nanoid | 3.3.18 | 1 |