StackRadar

CVE-2026-67320

High

Advisory

Published 20 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
32
of 17,781 indexed, latest versions
Container images
24
deployed by those charts
Fix available
1 of 1
affected package

Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning

Carried by container images the latest versions of 32 of 17,781 indexed charts deploy, on 24 images.

Affected packageAffected versionsFixed inImages
axiosnpm0.31.1, 0.32.0, 1.15.2, 1.16.0+2 more0.33.0, 1.18.024
OSV records
GHSA-gcfj-64vw-6mp9

Charts affected

32 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
axios@0.32.0
0.33.0

Open the chart page →

30,159
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
budibase/apps:3.41.344fe6feab985
axios@1.15.2
1.18.0

Open the chart page →

10,775
docmosthelmforgeVerified publisher1.2.111 of 4See more

docmost helmforge 1.2.11

1 of the 4 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
docmost/docmost:0.95.041c8d777cf23
axios@1.16.0
1.18.0

Open the chart page →

5,564
redisinsightredisinsight-guiVerified publisher1.3.51 of 1See more

redisinsight redisinsight-gui 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
redis/redisinsight:3.8b5e19ee240ab
axios@1.16.0
1.18.0

Open the chart page →

1,038
dbgateappscodeVerified publisher2026.3.301 of 1See more

dbgate appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
dbgate/dbgate:7.2.0-alpine287077002446
axios@1.17.0
1.18.0

Open the chart page →

458
directusdirectus-io2.1.01 of 3See more

directus directus-io 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
directus/directus:12.0.29c8470ea465c
axios@1.16.1
1.18.0

Open the chart page →

7,473
jellystatdjjudas21Verified publisher0.1.121 of 1See more

jellystat djjudas21 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
cyfershepard/jellystat:1.1.11c4e2dfa8bddf
axios@1.17.0
1.18.0

Open the chart page →

1,722
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
axios@1.16.1
1.18.0

Open the chart page →

2,575
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
axios@1.15.2
1.18.0

Open the chart page →

31,844
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
axios@1.15.2
1.18.0

Open the chart page →

3,833
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
axios@0.32.0
0.33.0

Open the chart page →

30,028
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
axios@1.16.0
1.18.0

Open the chart page →

22,193
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
axios@0.32.0
0.33.0

Open the chart page →

30,159
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
axios@0.32.0
0.33.0

Open the chart page →

30,099
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
axios@1.16.0
1.18.0

Open the chart page →

3,436
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
axios@1.16.0
1.18.0

Open the chart page →

3,092
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
library/ghost:6.39.0-alpine77196da4b0df
axios@1.16.0
1.18.0

Open the chart page →

2,756
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
axios@0.31.1
0.33.0

Open the chart page →

33,242
node-redlmatfyVerified publisher0.1.61 of 1See more

node-red lmatfy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
nodered/node-red:4.1.10-minimald73ae167cb9b
axios@1.16.0
1.18.0

Open the chart page →

1,809
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
axios@0.31.1
0.33.0

Open the chart page →

33,242
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
axios@0.32.0
0.33.0

Open the chart page →

30,028
ixyneoskop2.1.11 of 1See more

ixy neoskop 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
neoskop/ixy:2.1.125152b474f54
axios@1.16.0
1.18.0

Open the chart page →

1,166
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
axios@1.16.0
1.18.0

Open the chart page →

1,038
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
axios@0.32.0
0.33.0

Open the chart page →

30,219
etherpadschoenwald0.3.01 of 1See more

etherpad schoenwald 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
etherpad/etherpad:2.7.2b723fe5f2594
axios@1.15.2
1.18.0

Open the chart page →

2,133
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
axios@1.16.0
1.18.0

Open the chart page →

6,065
fdi-dotstatsuite-sfs-solr-statefulstatcan1.0.21 of 2See more

fdi-dotstatsuite-sfs-solr-stateful statcan 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
axios@1.16.0
1.18.0

Open the chart page →

919
strapistrapi-xmv0.1.11 of 1See more

strapi strapi-xmv 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
ghcr.io/xmv-solutions-gmbh/strapi:latesta288b4571142
axios@1.16.0
1.18.0

Open the chart page →

676
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
axios@1.16.0
1.18.0

Open the chart page →

4,661
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
axios@1.17.0
1.18.0

Open the chart page →

5,550
devportalveecode-platform-nextVerified publisher0.1.211 of 1See more

devportal veecode-platform-next 0.1.21

1 of the 1 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
veecode/devportaldigest-pinnedc443520aebf7
axios@1.16.1
1.18.0

Open the chart page →

1,787
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-67320.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
axios@1.15.2
1.18.0

Open the chart page →

5,459

Container images carrying it

24 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
redis/redisinsight:3.8:latestb5e19ee240ab
axios@1.16.0
1.18.0
4
louislam/uptime-kuma:2.5.4917318f9d7be
axios@0.32.0
0.33.0
2
louislam/uptime-kuma:2.3.29aeb4e51d038
axios@0.31.1
0.33.0
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
axios@0.32.0
0.33.0
2
requarks/wiki:2:latest68f0d1848261
axios@1.15.2
1.18.0
2
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
axios@1.16.0
1.18.0
2
budibase/apps:3.41.344fe6feab985
axios@1.15.2
1.18.0
1
cyfershepard/jellystat:1.1.11c4e2dfa8bddf
axios@1.17.0
1.18.0
1
dbgate/dbgate:7.2.0-alpine287077002446
axios@1.17.0
1.18.0
1
directus/directus:12.0.29c8470ea465c
axios@1.16.1
1.18.0
1
docmost/docmost:0.95.041c8d777cf23
axios@1.16.0
1.18.0
1
etherpad/etherpad:2.7.2b723fe5f2594
axios@1.15.2
1.18.0
1
library/ghost:6.37.01ef2e532ca4d
axios@1.16.0
1.18.0
1
library/ghost:6.41.129773d6be407
axios@1.16.0
1.18.0
1
library/ghost:6.39.0-alpine77196da4b0df
axios@1.16.0
1.18.0
1
louislam/uptime-kuma:2.5.33e24e96c89ef
axios@0.32.0
0.33.0
1
louislam/uptime-kuma:2.4.091e963bfda56
axios@0.32.0
0.33.0
1
n8nio/n8n:2.25.7761374d4eb84
axios@1.16.1
1.18.0
1
neoskop/ixy:2.1.125152b474f54
axios@1.16.0
1.18.0
1
nodered/node-red:4.1.10-minimald73ae167cb9b
axios@1.16.0
1.18.0
1
treskon/portrait-ui:DEV-lateste7970783bc8d
axios@1.15.2
1.18.0
1
twentycrm/twenty:v2.22.0e7d9948bf284
axios@1.17.0
1.18.0
1
veecode/devportalc443520aebf7
axios@1.16.1
1.18.0
1
ghcr.io/xmv-solutions-gmbh/strapi:latesta288b4571142
axios@1.16.0
1.18.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.