StackRadar

CVE-2026-73086

High

Advisory

Published 1 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
0.003
22nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
288
of 17,781 indexed, latest versions
Container images
302
deployed by those charts
Fix available
1 of 1
affected package

nanoid: Integer Overflow or Wraparound

Carried by container images the latest versions of 288 of 17,781 indexed charts deploy, on 302 images.

Affected packageAffected versionsFixed inImages
nanoidnpm2.1.11, 3.1.12, 3.1.16, 3.1.20+24 more3.3.12, 5.1.11302
OSV records
GHSA-xwg4-73v4-xw9w

Charts affected

288 by stars
ChartLatestAffected imagesRadar Score
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
nanoid@3.3.4
3.3.12

Open the chart page →

5,079
youtubedl-materialgeek-cookbookVerified publisher4.4.21 of 1See more

youtubedl-material geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.23720b856bd2f
nanoid@2.1.11
3.3.12

Open the chart page →

4,410
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
nanoid@3.3.7
3.3.12

Open the chart page →

4,196
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
nanoid@3.3.11
3.3.12

Open the chart page →

15,712
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
nanoid@3.3.8
3.3.12

Open the chart page →

5,228
kikplatekikplateVerified publisher0.22.01 of 3See more

kikplate kikplate 0.22.0

1 of the 3 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
ghcr.io/kikplate/kikplate-web:main34bbb61e8e42
nanoid@3.3.11
3.3.12

Open the chart page →

2,770
dashykrzwiatrzyk1.0.01 of 1See more

dashy krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
nanoid@3.3.4
3.3.12

Open the chart page →

3,143
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
langgenius/dify-web:0.6.11a2a294743634
nanoid@3.3.6
3.3.12

Open the chart page →

20,403
bulwark-maill4gVerified publisher0.2.21 of 1See more

bulwark-mail l4g 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
ghcr.io/bulwarkmail/webmail:1.6.0f0a266506fcf
nanoid@3.3.11
3.3.12

Open the chart page →

800
chibisafel4gVerified publisher0.1.12 of 3See more

chibisafe l4g 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
chibisafe/chibisafe:latest836467a50792
nanoid@3.3.7
3.3.12
chibisafe/chibisafe-server:latest3da4fcbc1a18
nanoid@3.3.7
3.3.12

Open the chart page →

5,654
mcpmcp-chartsVerified publisher0.0.231 of 7See more

mcp mcp-charts 0.0.23

1 of the 7 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
glarad/mcp-management-portal-clr:0.6.8807e453354a7
nanoid@2.1.11
3.3.12

Open the chart page →

6,929
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
nanoid@3.3.11
3.3.12

Open the chart page →

2,575
kuttone-acre-fundVerified publisher0.2.51 of 1See more

kutt one-acre-fund 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
kutt/kutt:latestfa3d24a89b04
nanoid@3.3.8
3.3.12

Open the chart page →

454
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
nanoid@3.3.11
3.3.12

Open the chart page →

6,873
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
nanoid@3.3.11
3.3.12

Open the chart page →

6,883
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
nanoid@3.3.11
3.3.12

Open the chart page →

7,035
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
nanoid@5.0.6
5.1.11

Open the chart page →

31,844
pumejwebapppumejnodejswebapp0.1.01 of 1See more

pumejwebapp pumejnodejswebapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
pumejlab/nodejs-webapp:latestf563eabcb819
nanoid@3.3.3
3.3.12

Open the chart page →

1,164
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
nanoid@5.1.7
5.1.11

Open the chart page →

5,482
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
nanoid@3.3.8
3.3.12

Open the chart page →

2,823
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
nanoid@3.3.7
3.3.12

Open the chart page →

30,234
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
nanoid@3.3.11
3.3.12

Open the chart page →

38,107
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
nanoid@3.3.11
3.3.12

Open the chart page →

5,213
vuiseriohub1.0.61 of 3See more

vui seriohub 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
dserio83/velero-ui:0.3.1b4e1ec6664d3
nanoid@3.3.11
3.3.12

Open the chart page →

11,532
speckle-serverspeckleVerified publisher2.26.34 of 4See more

speckle-server speckle 2.26.3

4 of the 4 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.26.3d51e1b0cf231
nanoid@5.1.5
5.1.11
speckle/speckle-preview-service:2.26.3092384dba45d
nanoid@5.1.5
5.1.11
speckle/speckle-server:2.26.379f14a2bf931
nanoid@3.3.11
3.3.12
speckle/speckle-webhook-service:2.26.3c58eb372c488
nanoid@5.1.5
5.1.11

Open the chart page →

10,380
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
nanoid@3.3.7
3.3.12

Open the chart page →

12,581
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
nanoid@3.3.7
3.3.12

Open the chart page →

5,225
tdarrvhdirkVerified publisher5.0.51 of 2See more

tdarr vhdirk 5.0.5

1 of the 2 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
nanoid@2.1.11
3.3.12

Open the chart page →

26,657
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
nanoid@3.2.0
3.3.12

Open the chart page →

3,833
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
nanoid@3.3.11
3.3.12

Open the chart page →

10,090
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
nanoid@3.3.1
3.3.12

Open the chart page →

9,783
adeptia-automate-mcpadeptia-automate-mcp1.0.02 of 2See more

adeptia-automate-mcp adeptia-automate-mcp 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
nanoid@3.3.11
3.3.12
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
nanoid@3.3.11
3.3.12

Open the chart page →

3,600
admin-portaladmin-web-portal1.2.11 of 2See more

admin-portal admin-web-portal 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
soulou2019/node-server:latest5e6ecfcc109e
nanoid@3.3.6
3.3.12

Open the chart page →

3,419
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
nanoid@3.3.11
3.3.12

Open the chart page →

3,820
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
nanoid@3.3.7
3.3.12

Open the chart page →

4,497
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
nanoid@3.3.3
3.3.12

Open the chart page →

3,437
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
nanoid@3.3.4
3.3.12

Open the chart page →

2,353
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
nanoid@3.3.4
3.3.12

Open the chart page →

2,396
argonix-apiargonix0.2.01 of 4See more

argonix-api argonix 0.2.0

1 of the 4 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api-frontend:1.0.0b6a67099e4c5
nanoid@3.3.11
3.3.12

Open the chart page →

4,923
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
nanoid@3.3.4
3.3.12

Open the chart page →

18,277
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
nanoid@3.3.7
3.3.12

Open the chart page →

32,501
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
ltdstudio/terraforming-mars:latest0e76c6f4eac0
nanoid@3.1.23
3.3.12

Open the chart page →

7,152
awesomeblessingappawesomeblessingapp1.1.01 of 1See more

awesomeblessingapp awesomeblessingapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
bnwokoye/nodejswebapp:latest74de7dc7ebfb
nanoid@3.3.3
3.3.12

Open the chart page →

1,267
myhelmappbelihelmapp1.1.01 of 1See more

myhelmapp belihelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
belirta/beli-docker:v1.0.0f65ad0e23b4d
nanoid@3.3.3
3.3.12

Open the chart page →

1,187
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
nanoid@3.3.4
3.3.12

Open the chart page →

4,455
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
nanoid@3.3.4
3.3.12

Open the chart page →

3,071
syslog-portalbryopsida0.3.11 of 1See more

syslog-portal bryopsida 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/syslog-portal:main3947bfd04f49
nanoid@3.3.8
3.3.12

Open the chart page →

1,306
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
nanoid@3.3.7
3.3.12

Open the chart page →

14,130
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
nanoid@3.3.11
3.3.12

Open the chart page →

4,083
chatgpt-next-webchatgpt-next-web0.1.11 of 1See more

chatgpt-next-web chatgpt-next-web 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-73086.

Container imageDigestPackageFixed in
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
nanoid@3.3.7
3.3.12

Open the chart page →

1,977

Container images carrying it

302 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
rcdelacruz/my-strapi-app:js-amd6438007f358355
nanoid@3.3.7
3.3.12
3
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
nanoid@3.3.4
3.3.12
3
governify/assets-manager:v1.4.12987672448c7
nanoid@3.1.25
3.3.12
2
hookiesolutions/webhookie:latest0629694246ba
nanoid@2.1.11
3.3.12
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
nanoid@3.3.7
3.3.12
2
kutt/kutt:latest:v3.2.6fa3d24a89b04
nanoid@3.3.8
3.3.12
2
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
nanoid@3.3.11
3.3.12
2
moreillon/api-proxy:a3e8b41e9e578c9653b6
nanoid@3.3.3
3.3.12
2
moreillon/group-manager:v4.9.0d5a0ec8394c0
nanoid@3.3.1
3.3.12
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
nanoid@3.3.3
3.3.12
2
opensearchproject/opensearch-dashboards:3.8.0ca28e40a095f
nanoid@5.1.9
5.1.11
2
outlinewiki/outline:0.69.1d060dcd8f9aa
nanoid@3.3.4
3.3.12
2
rajnandan1/kener:3.2.1930407afca731
nanoid@3.3.8
3.3.12
2
requarks/wiki:2:latest68f0d1848261
nanoid@3.2.0
3.3.12
2
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
nanoid@3.1.23
3.3.12
2
sysnet4admin/dashboard:bluec5bd3bb1b5a6
nanoid@3.3.7
3.3.12
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
nanoid@3.3.1
3.3.12
2
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
nanoid@3.3.4
3.3.12
2
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
nanoid@3.3.8
3.3.12
2
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
nanoid@2.1.11
3.3.12
2
activepieces/activepieces:0.23.0c26188b44e62
nanoid@3.3.6
3.3.12
1
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
nanoid@3.3.11
3.3.12
1
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
nanoid@3.3.11
3.3.12
1
alquimiaai/studio:certification38a1f0341982
nanoid@3.3.11
3.3.12
1
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
nanoid@3.3.7
3.3.12
1
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
nanoid@3.3.11
3.3.12
1
apimap/developer:v1.3.1406d3858e20c
nanoid@3.3.4
3.3.12
1
apimap/portal:v2.4.0041a4790c65c
nanoid@3.3.4
3.3.12
1
arfath29/3-tier-app-frontend:latest384b3e377f47
nanoid@3.1.23
3.3.12
1
assistiot/open_api_frontend:1.0.1f11d82defc70
nanoid@3.3.4
3.3.12
1
automatischio/automatisch:0.15.03bace7a12d5f
nanoid@3.3.11
3.3.12
1
baserow/baserow:1.30.1df0c42eb67e8
nanoid@3.3.7
3.3.12
1
belirta/beli-docker:v1.0.0f65ad0e23b4d
nanoid@3.3.3
3.3.12
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
nanoid@3.3.4
3.3.12
1
bnwokoye/nodejswebapp:latest74de7dc7ebfb
nanoid@3.3.3
3.3.12
1
ccjacobs14/amazon:59a9b14a6f09e
nanoid@3.3.6
3.3.12
1
chainsafe/lodestar:latest5593f6e97912
nanoid@3.3.11
3.3.12
1
chainsafe/lodestar:v1.27.07b9fe4aa8073
nanoid@3.3.8
3.3.12
1
chibisafe/chibisafe:latest836467a50792
nanoid@3.3.7
3.3.12
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
nanoid@3.3.7
3.3.12
1
chocobozzz/peertube:v8.1.5052712130691
nanoid@3.3.11
3.3.12
1
coderaiser/cloudcmd:16.6.1b34a9775c7ce
nanoid@3.3.4
3.3.12
1
coldatom/containers-security-front:latest7c2fbbb41bcf
nanoid@3.3.4
3.3.12
1
conduction/conduction-ui-app:devd591f5e6f2a9
nanoid@3.1.20
3.3.12
1
countly/api:25.05.4f4cc7447c4f5
nanoid@3.3.3
3.3.12
1
countly/countly-server:25.05.4e3c238248f99
nanoid@3.3.3
3.3.12
1
countly/frontend:25.05.42acbc11499b6
nanoid@3.3.3
3.3.12
1
dacinfomotion/h2p:latest68fa393b472c
nanoid@3.3.3
3.3.12
1
danny1dockerhub/nodejswebapp:lateste434683fcc89
nanoid@3.3.3
3.3.12
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
nanoid@3.3.7
3.3.12
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.