StackRadar

CVE-2026-73088

High

Advisory

Published 11 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
246
of 17,781 indexed, latest versions
Container images
248
deployed by those charts
Fix available
1 of 2
affected packages

Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)

Carried by container images the latest versions of 246 of 17,781 indexed charts deploy, on 248 images.

Affected packageAffected versionsFixed inImages
browserslistnpm0.4.0, 1.7.7, 2.11.3, 3.2.8+52 more4.28.7248
node-browserslistdeb4.22.1+~cs6.1.28-1no fix listed1
OSV records
GHSA-73wf-gq98-2v4gUBUNTU-CVE-2026-73088

Charts affected

246 by stars
ChartLatestAffected imagesRadar Score
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
browserslist@4.28.1
4.28.7

Open the chart page →

3,441
seerrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

seerr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
browserslist@4.28.1
4.28.7

Open the chart page →

2,548
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
browserslist@4.21.11
4.28.7

Open the chart page →

2,685
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest4538137bc5af
browserslist@4.24.3
4.28.7

Open the chart page →

3,555
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.4.05126e2e79a1f
browserslist@4.6.4
4.28.7

Open the chart page →

7,929
squareonelsst-sqre0.4.11 of 1See more

squareone lsst-sqre 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
lsstsqre/squareone:0.4.09ded78e7fe03
browserslist@4.16.6
4.28.7

Open the chart page →

2,247
frontendluiscajl0.1.71 of 1See more

frontend luiscajl 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
lavandadelpatio/frontend:latest501c3f31e0bc
browserslist@4.12.0
4.28.7

Open the chart page →

3,651
lynxpromptlynxpromptVerified publisher0.1.21 of 3See more

lynxprompt lynxprompt 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
drumsergio/lynxprompt:2.0.75c6afb6679301
browserslist@4.28.2
4.28.7

Open the chart page →

1,852
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
browserslist@4.23.0
4.28.7

Open the chart page →

4,647
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
browserslist@4.21.10
4.28.7

Open the chart page →

9,774
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
ghcr.io/rodg/nodecg-base:latest31be4bf87070
browserslist@4.23.0
4.28.7

Open the chart page →

7,315
kubevismario-fVerified publisher2.0.11 of 1See more

kubevis mario-f 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
browserslist@4.16.6
4.28.7

Open the chart page →

5,287
mauticmautic-chartVerified publisher1.0.21 of 3See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
mautic/mautic:7-apacheeb8cc73d97e1
browserslist@4.28.1
4.28.7

Open the chart page →

8,303
maxcrm-chartsmaxcrm-chartsVerified publisher1.1.2011 of 4See more

maxcrm-charts maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
browserslist@4.16.6
4.28.7

Open the chart page →

5,940
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
mintproject/ensemble-manager:d5656dbc01623e291564d2894c72f0e7cb2408f4222e3b941a36
browserslist@4.25.0
4.28.7

Open the chart page →

43,341
finance-portalmojaloop5.1.41 of 11See more

finance-portal mojaloop 5.1.4

1 of the 11 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
mojaloop/role-assignment-service:v2.1.0def4bf273721
browserslist@4.22.2
4.28.7

Open the chart page →

14,809
role-assignment-servicemojaloop3.1.01 of 1See more

role-assignment-service mojaloop 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
mojaloop/role-assignment-service:v2.1.0def4bf273721
browserslist@4.22.2
4.28.7

Open the chart page →

2,316
mongodb-admin-interfacemongo-db-admin-interfaceVerified publisher0.1.01 of 2See more

mongodb-admin-interface mongo-db-admin-interface 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
library/mongo-express:latest1b23d7976f02
browserslist@4.21.3
4.28.7

Open the chart page →

5,179
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
browserslist@4.14.2
4.28.7

Open the chart page →

6,438
api-proxymoreillonVerified publisher0.1.41 of 1See more

api-proxy moreillon 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
moreillon/api-proxy:2373c1953739ef6956b5
browserslist@4.21.5
4.28.7

Open the chart page →

1,712
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi-front:latestc1072f4ab6aa
browserslist@4.20.3
4.28.7

Open the chart page →

8,556
group-managermoreillonVerified publisher0.4.41 of 3See more

group-manager moreillon 0.4.4

1 of the 3 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
moreillon/group-manager:v4.9.0d5a0ec8394c0
browserslist@4.21.11
4.28.7

Open the chart page →

9,835
user-manager-mongodbmoreillonVerified publisher0.6.21 of 4See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
browserslist@4.22.2
4.28.7

Open the chart page →

25,704
user-manager-neo4jmoreillonVerified publisher0.9.72 of 6See more

user-manager-neo4j moreillon 0.9.7

2 of the 6 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
moreillon/group-manager:v4.9.0d5a0ec8394c0
browserslist@4.21.11
4.28.7
moreillon/user-manager:v5.0.2e1c9bfab5c16
browserslist@4.21.4
4.28.7

Open the chart page →

30,363
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
browserslist@3.2.8
4.28.7

Open the chart page →

6,684
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
browserslist@4.21.4
4.28.7

Open the chart page →

6,608
cloudcmdmy0nVerified publisher0.0.31 of 1See more

cloudcmd my0n 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
coderaiser/cloudcmd:16.6.1b34a9775c7ce
browserslist@4.21.4
4.28.7

Open the chart page →

3,128
myawesomeappmyawesomapp-mitchxxx0.1.11 of 1See more

myawesomeapp myawesomapp-mitchxxx 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
mitchxxx/amazon:214e72480ec63a
browserslist@4.21.5
4.28.7

Open the chart page →

2,116
myawesomeapp14myawesomeapp140.1.11 of 1See more

myawesomeapp14 myawesomeapp14 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
ccjacobs14/amazon:59a9b14a6f09e
browserslist@4.21.5
4.28.7

Open the chart page →

2,116
myawesomeapp-janmyawesomeapp-jan0.1.11 of 1See more

myawesomeapp-jan myawesomeapp-jan 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
ooghenekaro/amazon:latest03394ba1d6d8
browserslist@4.21.5
4.28.7

Open the chart page →

2,144
myawesomeapp-marmyawesomeapp-mar0.1.11 of 1See more

myawesomeapp-mar myawesomeapp-mar 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
winfred008/amazon:910a68de5b398
browserslist@4.21.5
4.28.7

Open the chart page →

2,116
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
browserslist@4.21.5
4.28.7

Open the chart page →

17,929
dashynas-helm-chartsVerified publisher1.0.41 of 1See more

dashy nas-helm-charts 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
lissy93/dashy:2.0.51991f7be5ed0
browserslist@4.19.1
4.28.7

Open the chart page →

3,269
smilencsaVerified publisher1.1.01 of 23See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
browserslist@1.7.7
4.28.7

Open the chart page →

109,294
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
browserslist@4.28.1
4.28.7

Open the chart page →

3,798
node-appnode-app-lili1.0.01 of 1See more

node-app node-app-lili 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
laly9999/node-app:1dd0e503913e1
browserslist@4.25.0
4.28.7

Open the chart page →

10,218
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
browserslist@4.21.10
4.28.7

Open the chart page →

15,132
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
browserslist@4.21.9
4.28.7

Open the chart page →

15,206
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
browserslist@4.21.5
4.28.7

Open the chart page →

15,187
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
browserslist@3.2.8
4.28.7

Open the chart page →

27,465
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
browserslist@4.17.1
4.28.7

Open the chart page →

9,968
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
browserslist@4.21.4
4.28.7

Open the chart page →

6,524
kratos-selfservice-ui-noderadar-baseVerified publisher0.43.11 of 1See more

kratos-selfservice-ui-node radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
browserslist@4.22.1
4.28.7

Open the chart page →

2,969
recipe-apprecipe-app0.1.02 of 2See more

recipe-app recipe-app 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
anamskenneth/recipe_backend:2025-06-079b7d2cd389b7
browserslist@4.23.3
4.28.7
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
browserslist@4.23.3
4.28.7

Open the chart page →

3,271
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
sharanalwar/redchef-frontend:latest5e82950b16b7
browserslist@4.24.4
4.28.7

Open the chart page →

4,763
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
browserslist@4.22.2
4.28.7

Open the chart page →

6,282
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
browserslist@4.23.3
4.28.7

Open the chart page →

7,084
claude-relayrevolution10.1.371 of 4See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
browserslist@4.25.1
4.28.7

Open the chart page →

4,600
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
browserslist@4.21.4
4.28.7

Open the chart page →

6,026
web-checkrm3lVerified publisher0.1.01 of 1See more

web-check rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-73088.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
browserslist@4.28.2
4.28.7

Open the chart page →

9,047

Container images carrying it

248 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
countly/countly-server:25.05.4e3c238248f99
browserslist@4.23.1
4.28.7
1
countly/frontend:25.05.42acbc11499b6
browserslist@4.23.1
4.28.7
1
cryptexlabs/authf:0.12.11189c07411d7c
browserslist@4.23.3
4.28.7
1
daskdev/dask-notebook:1.1.0052630f5ca04
browserslist@1.7.7
4.28.7
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
browserslist@4.23.3
4.28.7
1
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
browserslist@4.21.4
4.28.7
1
directus/directus:12.0.29c8470ea465c
browserslist@4.27.0
4.28.7
1
directus/directus:11.1.0e3c8bb975350
browserslist@4.23.3
4.28.7
1
documenso/documenso:v1.8.17f16a9449f18
browserslist@4.23.1
4.28.7
1
drumsergio/lynxprompt:2.0.75c6afb6679301
browserslist@4.28.2
4.28.7
1
dserio83/velero-ui:0.3.1b4e1ec6664d3
browserslist@4.24.4
4.28.7
1
electerious/ackee:3.2.05e7173fa321c
browserslist@4.17.0
4.28.7
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
browserslist@3.2.8
4.28.7
1
ethersphere/bzz-token-service:latest7624f11a72ad
browserslist@3.2.8
4.28.7
1
ethersphere/onboarding-faucet:0.3.0513154aab230
browserslist@4.19.3
4.28.7
1
ethpandaops/ethereumjs:masterfb84b718500f
browserslist@4.26.3
4.28.7
1
fallenbagel/jellyseerr:latest4538137bc5af
browserslist@4.24.3
4.28.7
1
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
browserslist@4.21.4
4.28.7
1
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
browserslist@4.5.5
4.28.7
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
browserslist@4.23.3
4.28.7
1
flanksource/incident-manager-ui:v1.4.318891f21df54fb
browserslist@4.28.4
4.28.7
1
fosrl/pangolin:1.13.0c32ad797ab96
browserslist@4.28.1
4.28.7
1
growthbook/growthbook:5.0.1f53ead646b5f
browserslist@4.27.0
4.28.7
1
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
browserslist@4.21.5
4.28.7
1
helga09/shoes_ukr:v1.1.17999bc8b77c0
browserslist@4.21.5
4.28.7
1
helmforge/strapi-base:5.52.270e9143d6d92
browserslist@4.28.2
4.28.7
1
henrywhitaker3/speedtest-tracker:latest47159a940229
browserslist@4.14.6
4.28.7
1
heywood8/redisinsight:2.28.00bc9ab313d37
browserslist@4.21.5
4.28.7
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
browserslist@4.19.1
4.28.7
1
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
browserslist@4.24.4
4.28.7
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
browserslist@4.24.0
4.28.7
1
ibarreche/cloud-front-ci:latestc8970ac1c8dc
browserslist@4.20.3
4.28.7
1
ibmcom/app-nav-ui:1.0.1e2a86997b36b
browserslist@3.2.8
4.28.7
1
ibmcom/microclimate-portal:latested5505e5c7ec
browserslist@2.11.3
4.28.7
1
instill/console:0.68.54cd70e2df5c6
browserslist@4.25.2
4.28.7
1
jayfong/yapi:1.10.2163e5d621910
browserslist@2.11.3
4.28.7
1
joplin/server:3.0-beta52af57880c0e
browserslist@4.21.4
4.28.7
1
joplin/server:2.14.2-betab87564ef34e9
browserslist@4.21.4
4.28.7
1
junktext/getting-started:1.0.5a70936c04aed
browserslist@4.17.3
4.28.7
1
junktext/getting-started:1.0.34d44adf5a4da2
browserslist@4.17.3
4.28.7
1
jupyterhub/jupyterhub:5.4.63974ba945e65
browserslist@4.22.1
node-browserslist@4.22.1+~cs6.1.28-1
4.28.7
no fix listed
1
keyoxide/keyoxide:stable96f27a71269d
browserslist@4.20.2
4.28.7
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
browserslist@4.20.3
4.28.7
1
konradkleine/docker-registry-frontend:v2181aad54ee64
browserslist@0.4.0
4.28.7
1
kyleslugg/klusterview:latestba8c36dfdfbd
browserslist@4.21.9
4.28.7
1
kyso/kyso-front:lateste52595c5c16f
browserslist@4.21.11
4.28.7
1
laly9999/node-app:1dd0e503913e1
browserslist@4.25.0
4.28.7
1
langgenius/dify-web:1.10.1-fix.1c306ac577912
browserslist@4.26.3
4.28.7
1
langgenius/dify-web:1.0.0d64914ff0d6d
browserslist@4.24.2
4.28.7
1
lavandadelpatio/frontend:latest501c3f31e0bc
browserslist@4.12.0
4.28.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.