StackRadar

CVE-2026-67213

Medium

Advisory

Published 29 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
311
of 17,781 indexed, latest versions
Container images
322
deployed by those charts
Fix available
1 of 2
affected packages

nanoid: custom generators can loop indefinitely when size is zero

Carried by container images the latest versions of 311 of 17,781 indexed charts deploy, on 322 images.

Affected packageAffected versionsFixed inImages
nanoidnpm2.1.11, 3.1.12, 3.1.16, 3.1.20+25 more3.3.18, 5.1.6322
node-postcssdeb8.4.31+~cs8.0.26-1no fix listed1
OSV records
GHSA-2v37-7h3g-55p8UBUNTU-CVE-2026-67213

Charts affected

311 by stars
ChartLatestAffected imagesRadar Score
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-67213.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
nanoid@3.3.8
3.3.18

Open the chart page →

5,228
uoappuoapp1.1.01 of 1See more

uoapp uoapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-67213.

Container imageDigestPackageFixed in
okaforuchena/uo-docker:V1.0.0004e81250f48
nanoid@3.3.3
3.3.18

Open the chart page →

1,187
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-67213.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
nanoid@3.3.7
3.3.18

Open the chart page →

2,789
hedgedocvista0.1.11 of 1See more

hedgedoc vista 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-67213.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
nanoid@2.1.11
3.3.18

Open the chart page →

3,118
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-67213.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
nanoid@3.3.11
3.3.18

Open the chart page →

5,984
queryservice-gatewaywbstack0.2.01 of 1See more

queryservice-gateway wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-67213.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
nanoid@3.1.20
3.3.18

Open the chart page →

2,559
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-67213.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
nanoid@2.1.11
3.3.18

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-67213.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
nanoid@2.1.11
3.3.18

Open the chart page →

28,605
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-67213.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
nanoid@3.2.0
3.3.18

Open the chart page →

5,459
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-67213.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
nanoid@3.3.8
3.3.18

Open the chart page →

6,285
workadventureworkadventure1.1.03 of 9See more

workadventure workadventure 1.1.0

3 of the 9 container images this version deploys carry CVE-2026-67213.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
nanoid@3.3.6
3.3.18
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
nanoid@3.3.6
3.3.18
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
nanoid@3.3.6
3.3.18

Open the chart page →

16,083

Container images carrying it

322 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
kubevious/collector:1.2.1f58226f9d84e
nanoid@3.3.3
3.3.18
1
kubevious/guard:1.2.19bf567704de2
nanoid@3.1.20
3.3.18
1
kubevious/parser:1.0.151acf1a1f0b47
nanoid@3.1.20
3.3.18
1
kubevious/parser:1.2.299ae7a5168c2
nanoid@3.3.3
3.3.18
1
kubevious/workload-operator:1.0.20b0f4c507eb6
nanoid@3.3.3
3.3.18
1
kyleslugg/klusterview:latestba8c36dfdfbd
nanoid@3.3.6
3.3.18
1
kyso/kyso-front:lateste52595c5c16f
nanoid@3.3.6
3.3.18
1
laly9999/node-app-dockerized:latest75ae77a20c6c
nanoid@3.3.3
3.3.18
1
langgenius/dify-web:0.6.11a2a294743634
nanoid@3.3.6
3.3.18
1
langgenius/dify-web:1.10.1-fix.1c306ac577912
nanoid@3.3.11
3.3.18
1
langgenius/dify-web:1.0.0d64914ff0d6d
nanoid@3.3.7
3.3.18
1
lavandadelpatio/frontend:latest501c3f31e0bc
nanoid@2.1.11
3.3.18
1
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
nanoid@3.3.7
3.3.18
1
library/ghost:6.37.01ef2e532ca4d
nanoid@3.3.11
3.3.18
1
library/ghost:6.25.12654b1e90413
nanoid@3.3.11
3.3.18
1
library/ghost:6.41.129773d6be407
nanoid@3.3.11
3.3.18
1
library/ghost:4.37.0767230c0f263
nanoid@3.2.0
3.3.18
1
library/ghost:6.39.0-alpine77196da4b0df
nanoid@3.3.11
3.3.18
1
library/ghost:5.79.083f7bf209844
nanoid@3.3.7
3.3.18
1
library/ghost:6.22.0-alpine3.23ac533a6988ee
nanoid@3.3.11
3.3.18
1
library/kibana:8.18.004c0fc150f3a
nanoid@3.3.8
3.3.18
1
linuxserver/codimd:latestb801bbcf6386
nanoid@2.1.11
3.3.18
1
linuxserver/overseerr:1.35.06108ed066d4a
nanoid@3.3.4
3.3.18
1
lobehub/lobe-chat:1.96.9da0c21fefcd3
nanoid@3.3.11
3.3.18
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
nanoid@3.3.11
3.3.18
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
nanoid@3.3.6
3.3.18
1
louislam/uptime-kuma:13d632903e6af
nanoid@3.3.11
3.3.18
1
louislam/uptime-kuma:2.0.24c364ef96aad
nanoid@3.3.11
3.3.18
1
louislam/uptime-kuma:2.4.091e963bfda56
nanoid@3.3.12
3.3.18
1
louislam/uptime-kuma:1.23.1396510915e6be
nanoid@3.3.7
3.3.18
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
nanoid@3.3.11
3.3.18
1
louislam/uptime-kuma:1.17.1a4eab252e5a2
nanoid@3.3.4
3.3.18
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
nanoid@3.3.7
3.3.18
1
lsstsqre/squareone:0.4.09ded78e7fe03
nanoid@3.1.22
3.3.18
1
ltdstudio/terraforming-mars:latest0e76c6f4eac0
nanoid@3.1.23
3.3.18
1
mautic/mautic:7-apacheeb8cc73d97e1
nanoid@3.3.11
3.3.18
1
misskey/misskey:12.110.1e08b7c478093
nanoid@3.3.1
3.3.18
1
mitchxxx/amazon:214e72480ec63a
nanoid@3.3.6
3.3.18
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
nanoid@5.0.4
5.1.6
1
moreillon/api-proxy:2373c1953739ef6956b5
nanoid@3.3.3
3.3.18
1
moreillon/api-proxy:latestd7d4a5463525
nanoid@3.3.3
3.3.18
1
moreillon/face-recognition-fastapi-front:latestc1072f4ab6aa
nanoid@3.3.3
3.3.18
1
moreillon/group-manager:latest3caa8f710ee0
nanoid@3.3.1
3.3.18
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
nanoid@3.1.20
3.3.18
1
mpopoola1/nodejsapp:latest061fc532de7d
nanoid@3.3.3
3.3.18
1
n8nio/n8n:2.25.7761374d4eb84
nanoid@3.3.11
3.3.18
1
n8nio/n8n:1.86.08b39ed5a2de9
nanoid@3.3.8
3.3.18
1
n8nio/n8n:0.212.0a9195bc499a3
nanoid@3.3.4
3.3.18
1
n8nio/n8n:1.33.1dd171d45102a
nanoid@3.3.6
3.3.18
1
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
nanoid@3.3.1
3.3.18
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.