StackRadar

CVE-2026-73089

High

Advisory

Published 11 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
249
of 17,787 indexed, latest versions
Container images
251
deployed by those charts
Fix available
1 of 2
affected packages

Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM

Carried by container images the latest versions of 249 of 17,787 indexed charts deploy, on 251 images.

Affected packageAffected versionsFixed inImages
browserslistnpm0.4.0, 1.7.7, 2.11.3, 3.2.8+52 more4.28.7251
node-browserslistdeb4.22.1+~cs6.1.28-1, 4.25.0+~cs6.3.22-1no fix listed2
OSV records
DEBIAN-CVE-2026-73089GHSA-c83g-rgw3-j3cxUBUNTU-CVE-2026-73089

Charts affected

249 by stars
ChartLatestAffected imagesRadar Score
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
browserslist@4.22.1
4.28.7

Open the chart page →

5,142
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
browserslist@4.7.1
4.28.7

Open the chart page →

12,906
containers-security-chartscontainers-security0.1.02 of 7See more

containers-security-charts containers-security 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
coldatom/containers-security-api:latesteae9e82da080
browserslist@4.21.5
4.28.7
coldatom/containers-security-front:latest7c2fbbb41bcf
browserslist@4.21.4
4.28.7

Open the chart page →

9,146
cortezacorteza1.1.01 of 3See more

corteza corteza 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
browserslist@4.24.4
4.28.7

Open the chart page →

8,251
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
browserslist@4.23.3
4.28.7

Open the chart page →

3,769
desishowbiz-frontenddesishowbiz1.0.01 of 1See more

desishowbiz-frontend desishowbiz 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
rahulbhiwagade122/desishowbiz:latest08490b70998c
browserslist@4.24.4
4.28.7

Open the chart page →

2,530
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
langgenius/dify-web:1.0.0d64914ff0d6d
browserslist@4.24.2
4.28.7

Open the chart page →

19,063
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
browserslist@4.23.3
4.28.7

Open the chart page →

4,551
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
browserslist@4.23.1
4.28.7

Open the chart page →

2,862
dumpstoredumpstore0.1.11 of 2See more

dumpstore dumpstore 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
browserslist@4.24.0
4.28.7

Open the chart page →

4,253
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
browserslist@4.8.3
4.28.7

Open the chart page →

11,174
dyff-frontenddyff-frontendVerified publisher0.20.11 of 1See more

dyff-frontend dyff-frontend 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-frontend:0.20.152549f52ae53
browserslist@4.28.1
4.28.7

Open the chart page →

973
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
browserslist@4.16.6
4.28.7

Open the chart page →

3,745
testnet-faucetethereum-helm-chartsVerified publisher0.1.31 of 1See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
parithoshj/testnet-faucet:9859e0dcdca426fea6d
browserslist@4.4.1
4.28.7

Open the chart page →

3,005
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
browserslist@3.2.8
4.28.7

Open the chart page →

3,260
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
browserslist@4.19.3
4.28.7

Open the chart page →

3,320
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
browserslist@4.23.3
4.28.7

Open the chart page →

4,661
flanksource-uiflanksourceVerified publisher1.4.3181 of 1See more

flanksource-ui flanksource 1.4.318

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.318891f21df54fb
browserslist@4.28.4
4.28.7

Open the chart page →

2,480
mission-controlflanksourceVerified publisher0.1.3361 of 8See more

mission-control flanksource 0.1.336

1 of the 8 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
browserslist@4.28.4
4.28.7

Open the chart page →

8,831
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
browserslist@4.16.1
4.28.7

Open the chart page →

4,043
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
browserslist@4.17.5
4.28.7

Open the chart page →

22,565
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
browserslist@4.17.5
4.28.7

Open the chart page →

24,360
hive-appgraphql-hive1.0.01 of 1See more

hive-app graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
browserslist@4.21.4
4.28.7

Open the chart page →

2,683
hive-appgraphql-hive-subcharts1.0.01 of 1See more

hive-app graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
browserslist@4.21.4
4.28.7

Open the chart page →

2,683
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
browserslist@4.23.3
4.28.7

Open the chart page →

2,949
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
browserslist@4.28.2
4.28.7

Open the chart page →

8,798
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
browserslist@4.23.3
4.28.7

Open the chart page →

3,451
automatischhelmforgeVerified publisher1.3.71 of 4See more

automatisch helmforge 1.3.7

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
automatischio/automatisch:0.15.03bace7a12d5f
browserslist@4.24.4
4.28.7

Open the chart page →

5,794
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
browserslist@4.23.1
4.28.7

Open the chart page →

18,923
paprahelmforgeVerified publisher1.0.01 of 1See more

papra helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
browserslist@4.26.3
4.28.7

Open the chart page →

2,536
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
browserslist@4.27.0
4.28.7

Open the chart page →

5,916
strapihelmforgeVerified publisher2.3.141 of 3See more

strapi helmforge 2.3.14

1 of the 3 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.270e9143d6d92
browserslist@4.28.2
4.28.7

Open the chart page →

2,073
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
browserslist@4.20.3
4.28.7

Open the chart page →

25,099
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
browserslist@4.17.5
4.28.7

Open the chart page →

4,253
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
browserslist@4.24.0
4.28.7

Open the chart page →

3,615
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
browserslist@4.22.1
4.28.7

Open the chart page →

3,355
ibm-app-navigatoribm-charts1.0.11 of 5See more

ibm-app-navigator ibm-charts 1.0.1

1 of the 5 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ibmcom/app-nav-ui:1.0.1e2a86997b36b
browserslist@3.2.8
4.28.7

Open the chart page →

32,911
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ibmcom/microclimate-portal:latested5505e5c7ec
browserslist@2.11.3
4.28.7

Open the chart page →

57,728
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
browserslist@4.23.3
4.28.7

Open the chart page →

11,838
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
browserslist@3.2.8
4.28.7

Open the chart page →

4,944
keyoxide-webittrident-oss0.2.31 of 1See more

keyoxide-web ittrident-oss 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
keyoxide/keyoxide:stable96f27a71269d
browserslist@4.20.2
4.28.7

Open the chart page →

2,363
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
browserslist@2.11.3
4.28.7

Open the chart page →

6,452
annotation-tooljtektVerified publisher0.1.51 of 2See more

annotation-tool jtekt 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
moreillon/api-proxy:a3e8b41e9e578c9653b6
browserslist@4.20.3
4.28.7

Open the chart page →

2,315
image-storage-servicejtektVerified publisher0.4.31 of 4See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
browserslist@4.22.1
4.28.7

Open the chart page →

22,665
polygonal-annotation-tooljtektVerified publisher0.1.51 of 2See more

polygonal-annotation-tool jtekt 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
moreillon/api-proxy:a3e8b41e9e578c9653b6
browserslist@4.20.3
4.28.7

Open the chart page →

2,231
shinsei-managerjtektVerified publisher0.2.04 of 8See more

shinsei-manager jtekt 0.2.0

4 of the 8 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
browserslist@4.21.5
4.28.7
moreillon/group-manager:latest3caa8f710ee0
browserslist@4.23.3
4.28.7
moreillon/user-manager:v5.0.2e1c9bfab5c16
browserslist@4.21.4
4.28.7
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
browserslist@4.22.1
4.28.7

Open the chart page →

59,560
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
browserslist@4.22.1
4.28.7

Open the chart page →

16,626
todo-appjunktext-via-aws1.2.101 of 1See more

todo-app junktext-via-aws 1.2.10

1 of the 1 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.34d44adf5a4da2
browserslist@4.17.3
4.28.7

Open the chart page →

1,579
keycloak-multi-client-notifierkeycloak-multi-client-notifier2.1.21 of 2See more

keycloak-multi-client-notifier keycloak-multi-client-notifier 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
ghcr.io/blessingnator/keycloak-mcn-backend:2.0.5967470f05472
browserslist@4.28.1
4.28.7

Open the chart page →

1,473
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-73089.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
browserslist@4.21.10
4.28.7

Open the chart page →

8,680

Container images carrying it

251 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
browserslist@2.11.3
4.28.7
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.