StackRadar

CVE-2026-69185

High

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
118
of 17,787 indexed, latest versions
Container images
105
deployed by those charts
Fix available
1 of 1
affected package

Socket.IO: Zero-attachment Memory Exhaustion

Carried by container images the latest versions of 118 of 17,787 indexed charts deploy, on 105 images.

Affected packageAffected versionsFixed inImages
socket.io-parsernpm2.2.0, 2.2.2, 2.2.6, 2.3.1+17 more3.3.6, 3.4.5, 4.2.7105
OSV records
GHSA-2m8v-j782-fhvr

Charts affected

118 by stars
ChartLatestAffected imagesRadar Score
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
socket.io-parser@4.2.1
4.2.7

Open the chart page →

4,431
etherpadschoenwald0.3.01 of 1See more

etherpad schoenwald 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
etherpad/etherpad:2.7.2b723fe5f2594
socket.io-parser@4.2.6
4.2.7

Open the chart page →

2,134
dashkioskt3n2.0.01 of 1See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
socket.io-parser@2.2.6
3.3.6

Open the chart page →

3,827
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
socket.io-parser@4.2.1
4.2.7

Open the chart page →

4,017
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
socket.io-parser@4.2.4
4.2.7

Open the chart page →

36,661
redis-vector-dbtest-opea1.0.01 of 1See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
socket.io-parser@4.2.4
4.2.7

Open the chart page →

5,652
vehicle-dashboardtest-vehi-dash0.1.02 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
samajh/alprbackend:latestea742b4372ad
socket.io-parser@3.3.2
3.3.6
samajh/alprfrontend:latest05ef4fddbb75
socket.io-parser@3.3.2
3.3.6

Open the chart page →

20,362
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
socket.io-parser@4.2.6
4.2.7

Open the chart page →

4,662
csmmth-chartsVerified publisher0.1.01 of 3See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
catalysm/csmm:latestf003b35f54d9
socket.io-parser@3.4.1
3.4.5

Open the chart page →

3,576
excalidashunxwaresVerified publisher2026.2.51 of 2See more

excalidash unxwares 2026.2.5

1 of the 2 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.4.271273af713c91
socket.io-parser@4.2.4
4.2.7

Open the chart page →

2,622
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
socket.io-parser@4.2.4
4.2.7

Open the chart page →

3,747
hedgedocvista0.1.11 of 1See more

hedgedoc vista 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
socket.io-parser@3.4.1
3.4.5

Open the chart page →

3,119
vote-appvote-appVerified publisher1.0.71 of 6See more

vote-app vote-app 1.0.7

1 of the 6 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
thecloudspark/app-result:1.09a5302cb8312
socket.io-parser@4.2.4
4.2.7

Open the chart page →

3,030
resultappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

resultapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
socket.io-parser@3.3.3
3.3.6

Open the chart page →

1,263
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
socket.io-parser@3.3.3
3.3.6

Open the chart page →

8,287
resultappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

resultapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
socket.io-parser@3.3.3
3.3.6

Open the chart page →

1,263
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_result:v1e510023fdf38
socket.io-parser@3.3.3
3.3.6

Open the chart page →

8,287
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-69185.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
socket.io-parser@4.2.4
4.2.7

Open the chart page →

5,774

Container images carrying it

105 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
kodekloud/examplevotingapp_result:v1e510023fdf38
socket.io-parser@3.3.3
3.3.6
4
redis/redisinsight:3.8:latestb5e19ee240ab
socket.io-parser@4.2.6
4.2.7
4
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
socket.io-parser@4.2.4
4.2.7
4
pantsel/konga:latestc8172b75607d
socket.io-parser@2.2.2
3.3.6
3
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
socket.io-parser@3.2.0
3.3.6
3
louislam/uptime-kuma:2.3.29aeb4e51d038
socket.io-parser@4.2.6
4.2.7
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
socket.io-parser@4.2.6
4.2.7
2
outlinewiki/outline:0.69.1d060dcd8f9aa
socket.io-parser@4.2.1
4.2.7
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
socket.io-parser@4.2.4
4.2.7
2
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
socket.io-parser@3.4.1
3.4.5
2
activepieces/activepieces:0.23.0c26188b44e62
socket.io-parser@4.2.4
4.2.7
1
assistiot/fl_orchestrator:api-latest7473d77448e1
socket.io-parser@4.2.4
4.2.7
1
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
socket.io-parser@4.0.4
4.2.7
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
socket.io-parser@4.2.1
4.2.7
1
budibase/apps:3.41.344fe6feab985
socket.io-parser@4.2.6
4.2.7
1
catalysm/csmm:latestf003b35f54d9
socket.io-parser@3.4.1
3.4.5
1
chocobozzz/peertube:v8.1.5052712130691
socket.io-parser@4.2.6
4.2.7
1
cnieg/maildev:v1.1.998ee05668915
socket.io-parser@3.3.0
3.3.6
1
coderaiser/cloudcmd:16.6.1b34a9775c7ce
socket.io-parser@4.0.5
4.2.7
1
cryptexlabs/authf:0.12.11189c07411d7c
socket.io-parser@4.0.5
4.2.7
1
cyfershepard/jellystat:1.1.11c4e2dfa8bddf
socket.io-parser@4.2.6
4.2.7
1
datarhei/restreamer:0.6.4655e12f9eeed
socket.io-parser@3.4.0
3.4.5
1
devkrishan001/backend:latestf1c3acadeabe
socket.io-parser@2.2.0
3.3.6
1
docmost/docmost:0.95.041c8d777cf23
socket.io-parser@4.2.6
4.2.7
1
etherpad/etherpad:2.7.2b723fe5f2594
socket.io-parser@4.2.6
4.2.7
1
evoapicloud/evolution-api:latest966625532d90
socket.io-parser@4.2.4
4.2.7
1
frappe/frappe-socketio:v13.4.12095767a9e82
socket.io-parser@3.4.1
3.4.5
1
globalping/globalping-probe:latest8acbd23009fd
socket.io-parser@4.2.4
4.2.7
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
socket.io-parser@4.2.4
4.2.7
1
heywood8/redisinsight:2.28.00bc9ab313d37
socket.io-parser@4.2.2
4.2.7
1
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
socket.io-parser@4.2.4
4.2.7
1
ianw/quickchart:v1.7.1dc49dd460c37
socket.io-parser@3.3.2
3.3.6
1
ibarreche/cloud-front-ci:latestc8970ac1c8dc
socket.io-parser@3.2.0
3.3.6
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
socket.io-parser@3.2.0
3.3.6
1
ibmcom/microclimate-portal:latested5505e5c7ec
socket.io-parser@3.2.0
3.3.6
1
inseefrlab/shelly:cloudshell31f04ca7436b
socket.io-parser@3.3.0
3.3.6
1
jakowenko/double-take:1.6.0b858bac9e32a
socket.io-parser@4.0.4
4.2.7
1
jayfong/yapi:1.10.2163e5d621910
socket.io-parser@2.3.1
3.3.6
1
konradkleine/docker-registry-frontend:v2181aad54ee64
socket.io-parser@2.3.1
3.3.6
1
kubevious/backend:1.2.22d9ba6eb46b6
socket.io-parser@4.2.4
4.2.7
1
kubevious/collector:1.2.1f58226f9d84e
socket.io-parser@4.2.4
4.2.7
1
kubevious/guard:1.2.19bf567704de2
socket.io-parser@4.0.4
4.2.7
1
kyso/kyso-front:lateste52595c5c16f
socket.io-parser@4.2.4
4.2.7
1
library/ghost:5.79.083f7bf209844
socket.io-parser@4.2.4
4.2.7
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
socket.io-parser@4.0.4
4.2.7
1
linuxserver/codimd:latestb801bbcf6386
socket.io-parser@3.3.1
3.3.6
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
socket.io-parser@4.2.5
4.2.7
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
socket.io-parser@4.2.4
4.2.7
1
louislam/uptime-kuma:13d632903e6af
socket.io-parser@4.2.4
4.2.7
1
louislam/uptime-kuma:2.0.24c364ef96aad
socket.io-parser@4.2.4
4.2.7
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.