CVE-2026-67315
MediumAdvisory
Published 20 Jul 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.9
- base score, highest
- EPSS
- 0.003
- 26th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 41
- of 17,781 indexed, latest versions
- Container images
- 31
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios
Carried by container images the latest versions of 41 of 17,781 indexed charts deploy, on 31 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| axiosnpm | 0.31.1, 0.32.0, 1.15.0, 1.15.1+4 more | 0.33.0, 1.18.0 | 31 |
- OSV records
- GHSA-f4gw-2p7v-4548
Charts affected
41 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| uptime-kumauptime-kumaVerified publisher | 4.2.0 | 1 of 1See more | 30,159 |
| servarrkubitodevVerified publisher | 1.5.2 | 1 of 10See more | 3,004 |
| budibasebudibase | 0.0.0-master | 1 of 7See more | 10,775 |
| docmosthelmforgeVerified publisher | 1.2.11 | 1 of 4See more | 5,564 |
| redisinsightredisinsight-guiVerified publisher | 1.3.5 | 1 of 1See more | 1,038 |
| dbgateappscodeVerified publisher | 2026.3.30 | 1 of 1See more | 458 |
| seerrbdclark-helm-chartsVerified publisher | 0.1.5 | 1 of 1See more | 1,991 |
| directusdirectus-io | 2.1.0 | 1 of 3See more | 7,473 |
| jellystatdjjudas21Verified publisher | 0.1.12 | 1 of 1See more | 1,722 |
| n8nn8n-helm | 2.25.7 | 1 of 1See more | 2,575 |
| portraitportraitVerified publisher | 0.2.13 | 1 of 8See more | 31,844 |
| rocketadminrocketadminOfficialVerified publisher | 1.0.42 | 1 of 1See more | 5,482 |
| wikiwenerme | 2.2.0 | 1 of 2See more | 3,833 |
| uptime-kumaadnoctemVerified publisher | 0.4.1 | 1 of 1See more | 30,028 |
| platform-uiappscodeVerified publisher | 2026.9.11 | 1 of 1See more | 690 |
| dapr-agentsdapr-agents-devVerified publisher | 0.1.5 | 1 of 31See more | 22,193 |
| uptime-kumaegebackVerified publisher | 2.0.12 | 1 of 1See more | 30,159 |
| hedgedocernail-hedgedoc | 5.0.0 | 1 of 1See more | 1,755 |
| uptime-kumahelmforgeVerified publisher | 1.5.12 | 1 of 1See more | 30,099 |
| ghostjanip81-helm-chartsVerified publisher | 0.1.2 | 1 of 1See more | 3,436 |
| shinsei-managerjtektVerified publisher | 0.2.0 | 1 of 8See more | 63,461 |
| ghostk8s-home-lab-repo | 4.1.0 | 1 of 1See more | 3,092 |
| ghostkubernetes-homelab-helm-chartsVerified publisher | 0.1.2 | 1 of 2See more | 2,756 |
| seerrkubernetes-homelab-helm-chartsVerified publisher | 0.1.2 | 1 of 1See more | 2,548 |
| uptime-kumalbenicio-communityVerified publisher | 0.1.1 | 1 of 1See more | 33,242 |
| node-redlmatfyVerified publisher | 0.1.6 | 1 of 1See more | 1,809 |
| uptime-kumaloeken-at-homeVerified publisher | 2.3.2 | 1 of 1See more | 33,242 |
| redisinsightlogic3579Verified publisher | 3.4.0 | 1 of 1See more | 1,490 |
| uptime-kumancsaVerified publisher | 1.7.2 | 1 of 1See more | 30,028 |
| ixyneoskop | 2.1.1 | 1 of 1See more | 1,166 |
| redisinsightredisinsightVerified publisher | 0.1.0 | 1 of 1See more | 1,038 |
| uptime-kumarubxkubeVerified publisher | 1.2.1 | 1 of 1See more | 30,219 |
| etherpadschoenwald | 0.3.0 | 1 of 1See more | 2,133 |
| seerr-chartseerr-chartVerified publisher | 3.9.1 | 1 of 1See more | 1,991 |
| fdi-dotstatsuite-sfs-solrstatcan | 1.0.2 | 1 of 4See more | 6,065 |
| fdi-dotstatsuite-sfs-solr-statefulstatcan | 1.0.2 | 1 of 2See more | 919 |
| strapistrapi-xmv | 0.1.1 | 1 of 1See more | 676 |
| thanhvt27-lab-k8sthanh-vtVerified publisher | 0.1.4 | 1 of 5See more | 4,661 |
| twentytwenty-crm | 0.1.11 | 1 of 4See more | 5,550 |
| devportalveecode-platform-nextVerified publisher | 0.1.21 | 1 of 1See more | 1,787 |
| wikiwikijs | 3.0.0 | 1 of 2See more | 5,459 |
Container images carrying it
31 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| redis/ | b5e19ee240ab | axios | 1.18.0 | 4 |
| ghcr.io/ | f4768de5f616 | axios | 1.18.0 | 3 |
| louislam/ | 917318f9d7be | axios | 0.33.0 | 2 |
| louislam/ | 9aeb4e51d038 | axios | 0.33.0 | 2 |
| louislam/ | a8610b3b4c38 | axios | 0.33.0 | 2 |
| requarks/ | 68f0d1848261 | axios | 1.18.0 | 2 |
| siscc/ | 12c5048f7402 | axios | 1.18.0 | 2 |
| budibase/ | 44fe6feab985 | axios | 1.18.0 | 1 |
| cyfershepard/ | c4e2dfa8bddf | axios | 1.18.0 | 1 |
| dbgate/ | 287077002446 | axios | 1.18.0 | 1 |
| directus/ | 9c8470ea465c | axios | 1.18.0 | 1 |
| docmost/ | 41c8d777cf23 | axios | 1.18.0 | 1 |
| etherpad/ | b723fe5f2594 | axios | 1.18.0 | 1 |
| library/ | 1ef2e532ca4d | axios | 1.18.0 | 1 |
| library/ | 29773d6be407 | axios | 1.18.0 | 1 |
| library/ | 77196da4b0df | axios | 1.18.0 | 1 |
| louislam/ | 3e24e96c89ef | axios | 0.33.0 | 1 |
| louislam/ | 91e963bfda56 | axios | 0.33.0 | 1 |
| moreillon/ | 3caa8f710ee0 | axios | 1.18.0 | 1 |
| n8nio/ | 761374d4eb84 | axios | 1.18.0 | 1 |
| neoskop/ | 25152b474f54 | axios | 1.18.0 | 1 |
| nodered/ | d73ae167cb9b | axios | 1.18.0 | 1 |
| redis/ | 85562d67a912 | axios | 1.18.0 | 1 |
| rocketadmin/ | 10955ef540b9 | axios | 1.18.0 | 1 |
| treskon/ | e7970783bc8d | axios | 1.18.0 | 1 |
| twentycrm/ | e7d9948bf284 | axios | 1.18.0 | 1 |
| veecode/ | c443520aebf7 | axios | 1.18.0 | 1 |
| ghcr.io/ | 668ee2682eaf | axios | 1.18.0 | 1 |
| ghcr.io/ | c4cbd5121236 | axios | 1.18.0 | 1 |
| ghcr.io/ | a288b4571142 | axios | 1.18.0 | 1 |
| quay.io/ | abdb6b08815d | axios | 1.18.0 | 1 |