StackRadar

CVE-2026-73089

High

Advisory

Published 11 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
246
of 17,781 indexed, latest versions
Container images
248
deployed by those charts
Fix available
1 of 2
affected packages

Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM

Carried by container images the latest versions of 246 of 17,781 indexed charts deploy, on 248 images.

Affected packageAffected versionsFixed inImages
browserslistnpm0.4.0, 1.7.7, 2.11.3, 3.2.8+52 more4.28.7248
node-browserslistdeb4.22.1+~cs6.1.28-1no fix listed1
OSV records
GHSA-c83g-rgw3-j3cxUBUNTU-CVE-2026-73089

Charts affected

246 by stars
ChartLatestAffected imagesRadar Score
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
browserslist@4.7.1
4.28.7

Open the chart page →

12,907
containers-security-chartscontainers-security0.1.02 of 7See more

containers-security-charts containers-security 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
coldatom/containers-security-api:latesteae9e82da080
browserslist@4.21.5
4.28.7
coldatom/containers-security-front:latest7c2fbbb41bcf
browserslist@4.21.4
4.28.7

Open the chart page →

9,146
cortezacorteza1.0.121 of 3See more

corteza corteza 1.0.12

1 of the 3 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
browserslist@4.24.4
4.28.7

Open the chart page →

8,368
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
browserslist@4.23.3
4.28.7

Open the chart page →

3,769
desishowbiz-frontenddesishowbiz1.0.01 of 1See more

desishowbiz-frontend desishowbiz 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
rahulbhiwagade122/desishowbiz:latest08490b70998c
browserslist@4.24.4
4.28.7

Open the chart page →

2,529
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
langgenius/dify-web:1.0.0d64914ff0d6d
browserslist@4.24.2
4.28.7

Open the chart page →

19,224
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
browserslist@4.23.3
4.28.7

Open the chart page →

4,551
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
browserslist@4.23.1
4.28.7

Open the chart page →

2,862
dumpstoredumpstore0.1.11 of 2See more

dumpstore dumpstore 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
browserslist@4.24.0
4.28.7

Open the chart page →

4,251
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
browserslist@4.8.3
4.28.7

Open the chart page →

11,174
dyff-frontenddyff-frontendVerified publisher0.20.11 of 1See more

dyff-frontend dyff-frontend 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-frontend:0.20.152549f52ae53
browserslist@4.28.1
4.28.7

Open the chart page →

973
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
browserslist@4.16.6
4.28.7

Open the chart page →

3,744
testnet-faucetethereum-helm-chartsVerified publisher0.1.31 of 1See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
parithoshj/testnet-faucet:9859e0dcdca426fea6d
browserslist@4.4.1
4.28.7

Open the chart page →

3,005
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
browserslist@3.2.8
4.28.7

Open the chart page →

3,260
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
browserslist@4.19.3
4.28.7

Open the chart page →

3,320
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
browserslist@4.23.3
4.28.7

Open the chart page →

4,650
flanksource-uiflanksourceVerified publisher1.4.3181 of 1See more

flanksource-ui flanksource 1.4.318

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.318891f21df54fb
browserslist@4.28.4
4.28.7

Open the chart page →

2,558
mission-controlflanksourceVerified publisher0.1.3361 of 8See more

mission-control flanksource 0.1.336

1 of the 8 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
browserslist@4.28.4
4.28.7

Open the chart page →

8,902
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
browserslist@4.16.1
4.28.7

Open the chart page →

4,043
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
browserslist@4.17.5
4.28.7

Open the chart page →

22,512
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
browserslist@4.17.5
4.28.7

Open the chart page →

24,319
hive-appgraphql-hive1.0.01 of 1See more

hive-app graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
browserslist@4.21.4
4.28.7

Open the chart page →

2,682
hive-appgraphql-hive-subcharts1.0.01 of 1See more

hive-app graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
browserslist@4.21.4
4.28.7

Open the chart page →

2,682
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
browserslist@4.23.3
4.28.7

Open the chart page →

2,950
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
browserslist@4.28.2
4.28.7

Open the chart page →

9,047
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
browserslist@4.23.3
4.28.7

Open the chart page →

3,451
automatischhelmforgeVerified publisher1.3.71 of 4See more

automatisch helmforge 1.3.7

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
automatischio/automatisch:0.15.03bace7a12d5f
browserslist@4.24.4
4.28.7

Open the chart page →

5,769
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
browserslist@4.23.1
4.28.7

Open the chart page →

18,813
paprahelmforgeVerified publisher1.0.01 of 1See more

papra helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
browserslist@4.26.3
4.28.7

Open the chart page →

2,538
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
browserslist@4.27.0
4.28.7

Open the chart page →

6,012
strapihelmforgeVerified publisher2.3.141 of 3See more

strapi helmforge 2.3.14

1 of the 3 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.270e9143d6d92
browserslist@4.28.2
4.28.7

Open the chart page →

2,061
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
browserslist@4.20.3
4.28.7

Open the chart page →

25,017
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
browserslist@4.17.5
4.28.7

Open the chart page →

4,253
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
browserslist@4.24.0
4.28.7

Open the chart page →

3,614
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
browserslist@4.22.1
4.28.7

Open the chart page →

3,407
ibm-app-navigatoribm-charts1.0.11 of 5See more

ibm-app-navigator ibm-charts 1.0.1

1 of the 5 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ibmcom/app-nav-ui:1.0.1e2a86997b36b
browserslist@3.2.8
4.28.7

Open the chart page →

32,915
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ibmcom/microclimate-portal:latested5505e5c7ec
browserslist@2.11.3
4.28.7

Open the chart page →

57,669
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
browserslist@4.23.3
4.28.7

Open the chart page →

11,812
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
browserslist@3.2.8
4.28.7

Open the chart page →

4,944
keyoxide-webittrident-oss0.2.31 of 1See more

keyoxide-web ittrident-oss 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
keyoxide/keyoxide:stable96f27a71269d
browserslist@4.20.2
4.28.7

Open the chart page →

2,363
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
browserslist@2.11.3
4.28.7

Open the chart page →

6,454
annotation-tooljtektVerified publisher0.1.51 of 2See more

annotation-tool jtekt 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
moreillon/api-proxy:a3e8b41e9e578c9653b6
browserslist@4.20.3
4.28.7

Open the chart page →

2,315
image-storage-servicejtektVerified publisher0.4.31 of 4See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
browserslist@4.22.1
4.28.7

Open the chart page →

22,589
polygonal-annotation-tooljtektVerified publisher0.1.51 of 2See more

polygonal-annotation-tool jtekt 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
moreillon/api-proxy:a3e8b41e9e578c9653b6
browserslist@4.20.3
4.28.7

Open the chart page →

2,231
shinsei-managerjtektVerified publisher0.2.04 of 8See more

shinsei-manager jtekt 0.2.0

4 of the 8 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
browserslist@4.21.5
4.28.7
moreillon/group-manager:latest3caa8f710ee0
browserslist@4.23.3
4.28.7
moreillon/user-manager:v5.0.2e1c9bfab5c16
browserslist@4.21.4
4.28.7
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
browserslist@4.22.1
4.28.7

Open the chart page →

63,461
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
browserslist@4.22.1
4.28.7

Open the chart page →

16,600
todo-appjunktext-via-aws1.2.101 of 1See more

todo-app junktext-via-aws 1.2.10

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.34d44adf5a4da2
browserslist@4.17.3
4.28.7

Open the chart page →

1,579
keycloak-multi-client-notifierkeycloak-multi-client-notifier2.1.21 of 2See more

keycloak-multi-client-notifier keycloak-multi-client-notifier 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/blessingnator/keycloak-mcn-backend:2.0.5967470f05472
browserslist@4.28.1
4.28.7

Open the chart page →

1,473
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
browserslist@4.21.10
4.28.7

Open the chart page →

9,098
rtlkronkltdVerified publisher0.1.01 of 2See more

rtl kronkltd 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.11.0d0cd3d868aca
browserslist@4.16.6
4.28.7

Open the chart page →

5,604

Container images carrying it

248 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
countly/countly-server:25.05.4e3c238248f99
browserslist@4.23.1
4.28.7
1
countly/frontend:25.05.42acbc11499b6
browserslist@4.23.1
4.28.7
1
cryptexlabs/authf:0.12.11189c07411d7c
browserslist@4.23.3
4.28.7
1
daskdev/dask-notebook:1.1.0052630f5ca04
browserslist@1.7.7
4.28.7
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
browserslist@4.23.3
4.28.7
1
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
browserslist@4.21.4
4.28.7
1
directus/directus:12.0.29c8470ea465c
browserslist@4.27.0
4.28.7
1
directus/directus:11.1.0e3c8bb975350
browserslist@4.23.3
4.28.7
1
documenso/documenso:v1.8.17f16a9449f18
browserslist@4.23.1
4.28.7
1
drumsergio/lynxprompt:2.0.75c6afb6679301
browserslist@4.28.2
4.28.7
1
dserio83/velero-ui:0.3.1b4e1ec6664d3
browserslist@4.24.4
4.28.7
1
electerious/ackee:3.2.05e7173fa321c
browserslist@4.17.0
4.28.7
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
browserslist@3.2.8
4.28.7
1
ethersphere/bzz-token-service:latest7624f11a72ad
browserslist@3.2.8
4.28.7
1
ethersphere/onboarding-faucet:0.3.0513154aab230
browserslist@4.19.3
4.28.7
1
ethpandaops/ethereumjs:masterfb84b718500f
browserslist@4.26.3
4.28.7
1
fallenbagel/jellyseerr:latest4538137bc5af
browserslist@4.24.3
4.28.7
1
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
browserslist@4.21.4
4.28.7
1
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
browserslist@4.5.5
4.28.7
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
browserslist@4.23.3
4.28.7
1
flanksource/incident-manager-ui:v1.4.318891f21df54fb
browserslist@4.28.4
4.28.7
1
fosrl/pangolin:1.13.0c32ad797ab96
browserslist@4.28.1
4.28.7
1
growthbook/growthbook:5.0.1f53ead646b5f
browserslist@4.27.0
4.28.7
1
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
browserslist@4.21.5
4.28.7
1
helga09/shoes_ukr:v1.1.17999bc8b77c0
browserslist@4.21.5
4.28.7
1
helmforge/strapi-base:5.52.270e9143d6d92
browserslist@4.28.2
4.28.7
1
henrywhitaker3/speedtest-tracker:latest47159a940229
browserslist@4.14.6
4.28.7
1
heywood8/redisinsight:2.28.00bc9ab313d37
browserslist@4.21.5
4.28.7
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
browserslist@4.19.1
4.28.7
1
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
browserslist@4.24.4
4.28.7
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
browserslist@4.24.0
4.28.7
1
ibarreche/cloud-front-ci:latestc8970ac1c8dc
browserslist@4.20.3
4.28.7
1
ibmcom/app-nav-ui:1.0.1e2a86997b36b
browserslist@3.2.8
4.28.7
1
ibmcom/microclimate-portal:latested5505e5c7ec
browserslist@2.11.3
4.28.7
1
instill/console:0.68.54cd70e2df5c6
browserslist@4.25.2
4.28.7
1
jayfong/yapi:1.10.2163e5d621910
browserslist@2.11.3
4.28.7
1
joplin/server:3.0-beta52af57880c0e
browserslist@4.21.4
4.28.7
1
joplin/server:2.14.2-betab87564ef34e9
browserslist@4.21.4
4.28.7
1
junktext/getting-started:1.0.5a70936c04aed
browserslist@4.17.3
4.28.7
1
junktext/getting-started:1.0.34d44adf5a4da2
browserslist@4.17.3
4.28.7
1
jupyterhub/jupyterhub:5.4.63974ba945e65
browserslist@4.22.1
node-browserslist@4.22.1+~cs6.1.28-1
4.28.7
no fix listed
1
keyoxide/keyoxide:stable96f27a71269d
browserslist@4.20.2
4.28.7
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
browserslist@4.20.3
4.28.7
1
konradkleine/docker-registry-frontend:v2181aad54ee64
browserslist@0.4.0
4.28.7
1
kyleslugg/klusterview:latestba8c36dfdfbd
browserslist@4.21.9
4.28.7
1
kyso/kyso-front:lateste52595c5c16f
browserslist@4.21.11
4.28.7
1
laly9999/node-app:1dd0e503913e1
browserslist@4.25.0
4.28.7
1
langgenius/dify-web:1.10.1-fix.1c306ac577912
browserslist@4.26.3
4.28.7
1
langgenius/dify-web:1.0.0d64914ff0d6d
browserslist@4.24.2
4.28.7
1
lavandadelpatio/frontend:latest501c3f31e0bc
browserslist@4.12.0
4.28.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.