StackRadar

CVE-2026-73089

High

Advisory

Published 11 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
249
of 17,787 indexed, latest versions
Container images
251
deployed by those charts
Fix available
1 of 2
affected packages

Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM

Carried by container images the latest versions of 249 of 17,787 indexed charts deploy, on 251 images.

Affected packageAffected versionsFixed inImages
browserslistnpm0.4.0, 1.7.7, 2.11.3, 3.2.8+52 more4.28.7251
node-browserslistdeb4.22.1+~cs6.1.28-1, 4.25.0+~cs6.3.22-1no fix listed2
OSV records
DEBIAN-CVE-2026-73089GHSA-c83g-rgw3-j3cxUBUNTU-CVE-2026-73089

Charts affected

249 by stars
ChartLatestAffected imagesRadar Score
todo-appjunktext-direct1.1.41 of 1See more

todo-app junktext-direct 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.5a70936c04aed
browserslist@4.17.3
4.28.7

Open the chart page →

3,369
dashykrzwiatrzyk1.0.01 of 1See more

dashy krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
browserslist@4.20.3
4.28.7

Open the chart page →

3,143
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
browserslist@4.23.0
4.28.7

Open the chart page →

5,657
jspolicyloftVerified publisher0.2.21 of 1See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
loftsh/jspolicy:0.2.225deb9bd2683
browserslist@4.21.5
4.28.7

Open the chart page →

2,309
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
browserslist@4.16.6
4.28.7

Open the chart page →

5,941
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
browserslist@4.23.3
4.28.7

Open the chart page →

13,763
open5gs-webuiopen5gs-webuiVerified publisher2.3.11 of 2See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
browserslist@2.11.3
4.28.7

Open the chart page →

5,300
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
browserslist@4.24.4
4.28.7

Open the chart page →

6,899
pdf-editor-helmpdf-editor-web1.0.01 of 4See more

pdf-editor-helm pdf-editor-web 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
browserslist@4.21.4
4.28.7

Open the chart page →

4,206
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
browserslist@4.28.1
4.28.7

Open the chart page →

7,075
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
browserslist@4.28.1
4.28.7

Open the chart page →

31,949
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
browserslist@4.28.2
4.28.7

Open the chart page →

5,508
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
browserslist@4.23.1
4.28.7

Open the chart page →

2,823
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
browserslist@4.23.3
4.28.7

Open the chart page →

30,310
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
browserslist@4.25.0
4.28.7

Open the chart page →

5,214
vuiseriohub1.0.61 of 3See more

vui seriohub 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
dserio83/velero-ui:0.3.1b4e1ec6664d3
browserslist@4.24.4
4.28.7

Open the chart page →

11,545
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
speckle/speckle-server:2.26.379f14a2bf931
browserslist@4.25.3
4.28.7

Open the chart page →

10,405
stornxstornxVerified publisher1.1.11 of 9See more

stornx stornx 1.1.1

1 of the 9 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
alazidis/stornx:1.1.1602d4f7f090c
browserslist@4.24.5
4.28.7

Open the chart page →

11,683
ackeesudaVerified publisher0.2.11 of 1See more

ackee suda 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
electerious/ackee:3.2.05e7173fa321c
browserslist@4.17.0
4.28.7

Open the chart page →

1,602
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
browserslist@4.11.1
4.28.7

Open the chart page →

7,517
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
browserslist@4.23.3
4.28.7

Open the chart page →

12,137
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
browserslist@4.28.2
4.28.7

Open the chart page →

3,834
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
browserslist@4.25.4
4.28.7

Open the chart page →

10,131
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
browserslist@2.11.3
4.28.7

Open the chart page →

25,507
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
browserslist@4.23.0
4.28.7

Open the chart page →

4,881
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
browserslist@4.21.4
4.28.7

Open the chart page →

3,437
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
browserslist@4.20.3
4.28.7

Open the chart page →

3,237
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
browserslist@4.21.3
4.28.7

Open the chart page →

2,353
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
browserslist@4.19.3
4.28.7

Open the chart page →

2,396
argonix-apiargonix0.2.31 of 4See more

argonix-api argonix 0.2.3

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api-frontend:1.0.0d041bbf2814f
browserslist@4.28.1
4.28.7

Open the chart page →

4,819
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:api-latest7473d77448e1
browserslist@4.23.0
4.28.7

Open the chart page →

9,407
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
browserslist@4.21.5
4.28.7

Open the chart page →

18,331
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
browserslist@4.23.0
4.28.7

Open the chart page →

31,807
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ltdstudio/terraforming-mars:latest0e76c6f4eac0
browserslist@4.16.6
4.28.7

Open the chart page →

7,166
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
browserslist@4.21.4
4.28.7

Open the chart page →

4,455
bluerange-mosquittobluerangeOfficialVerified publisher1.0.41 of 1See more

bluerange-mosquitto bluerange 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
bluerange/bluerange-mosquitto:25f1bfbba84832
browserslist@4.16.3
4.28.7

Open the chart page →

1,168
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
browserslist@4.24.4
4.28.7
sysnet4admin/colosseum-prm:log5802bfcd7fed
browserslist@4.24.4
4.28.7

Open the chart page →

26,266
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
browserslist@4.21.4
4.28.7

Open the chart page →

3,072
registry-uibryanalves0.2.01 of 1See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
konradkleine/docker-registry-frontend:v2181aad54ee64
browserslist@0.4.0
4.28.7

Open the chart page →

4,069
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
browserslist@4.24.0
4.28.7

Open the chart page →

13,363
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
obolnetwork/charon-dkg-sidecar:maine263be0a7440
browserslist@4.27.0
4.28.7

Open the chart page →

7,457
chatgpt-next-webchatgpt-next-web0.1.11 of 1See more

chatgpt-next-web chatgpt-next-web 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
browserslist@4.21.9
4.28.7

Open the chart page →

1,977
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
browserslist@4.23.1
4.28.7
countly/frontend:25.05.42acbc11499b6
browserslist@4.23.1
4.28.7

Open the chart page →

7,295
kamaji-consoleclastixVerified publisher0.1.31 of 1See more

kamaji-console clastix 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
browserslist@4.24.4
4.28.7

Open the chart page →

2,761
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
browserslist@1.7.7
4.28.7

Open the chart page →

29,922
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
browserslist@4.9.1
4.28.7

Open the chart page →

25,454
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad3 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

3 of the 6 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
browserslist@4.24.2
4.28.7
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
browserslist@4.25.0
4.28.7
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
browserslist@4.25.0
4.28.7

Open the chart page →

18,256
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
browserslist@4.22.1
node-browserslist@4.22.1+~cs6.1.28-1
4.28.7
no fix listed

Open the chart page →

13,286
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
browserslist@4.22.1
4.28.7

Open the chart page →

5,142
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
browserslist@4.22.1
4.28.7

Open the chart page →

5,142

Container images carrying it

251 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
browserslist@2.11.3
4.28.7
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.