StackRadar

CVE-2026-73651

Medium

Advisory

Published 21 Jul 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.7
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
41
of 17,781 indexed, latest versions
Container images
35
deployed by those charts
Fix available
1 of 1
affected package

TypeORM: migration:generate template-literal code injection

Carried by container images the latest versions of 41 of 17,781 indexed charts deploy, on 35 images.

Affected packageAffected versionsFixed inImages
typeormnpm0.2.18, 0.2.32, 0.2.38, 0.2.39+14 more0.3.31, 1.1.035
OSV records
GHSA-2rp8-mm9q-fp49

Charts affected

41 by stars
ChartLatestAffected imagesRadar Score
servarrkubitodevVerified publisher1.5.21 of 10See more

servarr kubitodev 1.5.2

1 of the 10 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:latestf4768de5f616
typeorm@0.3.29
0.3.31

Open the chart page →

3,004
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
typeorm@0.3.15
0.3.31

Open the chart page →

2,828
redisinsightredisinsight-guiVerified publisher1.3.51 of 1See more

redisinsight redisinsight-gui 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
redis/redisinsight:3.8b5e19ee240ab
typeorm@0.3.29
0.3.31

Open the chart page →

1,038
redisinsight-secureredisinsight-secureVerified publisher1.0.21 of 1See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
redis/redisinsight:2.68019fcf774631
typeorm@0.3.15
0.3.31

Open the chart page →

1,721
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
typeorm@0.3.28
0.3.31

Open the chart page →

1,339
servarrservarr1.0.21 of 10See more

servarr servarr 1.0.2

1 of the 10 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
typeorm@0.3.12
0.3.31

Open the chart page →

14,238
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
typeorm@0.3.5
0.3.31

Open the chart page →

5,251
activepiecesmeyerchartsVerified publisher0.1.61 of 1See more

activepieces meyercharts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
activepieces/activepieces:0.23.0c26188b44e62
typeorm@0.3.18
0.3.31

Open the chart page →

2,635
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
typeorm@0.3.11
0.3.31

Open the chart page →

7,776
overseerrpree-helm-chartsVerified publisher1.2.01 of 1See more

overseerr pree-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.35.06197516c9d7b
typeorm@0.3.12
0.3.31

Open the chart page →

2,702
seerrbdclark-helm-chartsVerified publisher0.1.51 of 1See more

seerr bdclark-helm-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.4.1f4768de5f616
typeorm@0.3.29
0.3.31

Open the chart page →

1,991
overseerrgeek-cookbookVerified publisher5.4.21 of 1See more

overseerr geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.26.1254d16af8f71
typeorm@0.2.32
0.3.31

Open the chart page →

3,444
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
typeorm@0.3.28
0.3.31

Open the chart page →

5,482
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
typeorm@0.3.11
0.3.31

Open the chart page →

2,823
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
typeorm@0.3.10
0.3.31

Open the chart page →

4,455
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
typeorm@0.3.12
0.3.31

Open the chart page →

3,071
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
typeorm@0.3.29
0.3.31

Open the chart page →

22,193
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
typeorm@0.3.28
0.3.31

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
typeorm@0.3.28
0.3.31

Open the chart page →

68,240
onboarding-portalfiware1.4.31 of 1See more

onboarding-portal fiware 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
quay.io/seamware/onboarding:0.2.2b406475f9f00
typeorm@0.3.28
0.3.31

Open the chart page →

1,489
interbtc-hydrainterlay0.1.152 of 4See more

interbtc-hydra interlay 0.1.15

2 of the 4 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
typeorm@0.2.38
0.3.31
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
typeorm@0.2.38
0.3.31

Open the chart page →

6,831
interlay-firesquidinterlay0.1.112 of 4See more

interlay-firesquid interlay 0.1.11

2 of the 4 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
typeorm@0.3.9
0.3.31
subsquid/substrate-explorer:firesquid0889a857f192
typeorm@0.3.12
0.3.31

Open the chart page →

4,667
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
typeorm@0.3.26
0.3.31

Open the chart page →

1,290
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
typeorm@0.2.44
0.3.31

Open the chart page →

4,230
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
typeorm@0.2.41
0.3.31

Open the chart page →

5,410
seerrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

seerr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
typeorm@0.3.28
0.3.31

Open the chart page →

2,548
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest4538137bc5af
typeorm@0.3.12
0.3.31

Open the chart page →

3,555
redisinsightlogic3579Verified publisher3.4.01 of 1See more

redisinsight logic3579 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
redis/redisinsight:3.485562d67a912
typeorm@0.3.26
0.3.31

Open the chart page →

1,490
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
ghcr.io/rodg/nodecg-base:latest31be4bf87070
typeorm@0.3.19
0.3.31

Open the chart page →

7,315
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
typeorm@0.2.39
0.3.31

Open the chart page →

9,968
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
typeorm@0.3.29
0.3.31

Open the chart page →

1,038
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
typeorm@0.3.15
0.3.31

Open the chart page →

1,884
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
typeorm@0.2.18
0.3.31

Open the chart page →

5,215
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
typeorm@0.3.12
0.3.31

Open the chart page →

15,591
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
typeorm@0.3.28
0.3.31

Open the chart page →

68,240
seerr-chartseerr-chartVerified publisher3.9.11 of 1See more

seerr-chart seerr-chart 3.9.1

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.4.1f4768de5f616
typeorm@0.3.29
0.3.31

Open the chart page →

1,991
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
typeorm@0.3.15
0.3.31

Open the chart page →

39,090
redis-vector-dbtest-opea1.0.01 of 1See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
typeorm@0.3.15
0.3.31

Open the chart page →

5,604
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
typeorm@0.3.29
0.3.31

Open the chart page →

4,661
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
typeorm@0.3.29
0.3.31

Open the chart page →

5,550
devportalveecode-platform-nextVerified publisher0.1.211 of 1See more

devportal veecode-platform-next 0.1.21

1 of the 1 container images this version deploys carry CVE-2026-73651.

Container imageDigestPackageFixed in
veecode/devportaldigest-pinnedc443520aebf7
typeorm@1.0.0
1.1.0

Open the chart page →

1,787

Container images carrying it

35 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
redis/redisinsight:3.8:latestb5e19ee240ab
typeorm@0.3.29
0.3.31
4
ghcr.io/seerr-team/seerr:latest:v3.4.1f4768de5f616
typeorm@0.3.29
0.3.31
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
typeorm@0.3.28
0.3.31
3
redis/redis-stack:7.2.0-v91c5f43fddcdd
typeorm@0.3.15
0.3.31
2
activepieces/activepieces:0.23.0c26188b44e62
typeorm@0.3.18
0.3.31
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
typeorm@0.3.10
0.3.31
1
bnjbvr/kresus:0.22.137e216b182c8
typeorm@0.3.12
0.3.31
1
fallenbagel/jellyseerr:latest4538137bc5af
typeorm@0.3.12
0.3.31
1
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
typeorm@0.3.12
0.3.31
1
gristlabs/grist:0.7.96e71b1914a7e
typeorm@0.2.18
0.3.31
1
heywood8/redisinsight:2.28.00bc9ab313d37
typeorm@0.3.15
0.3.31
1
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
typeorm@0.2.38
0.3.31
1
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
typeorm@0.3.9
0.3.31
1
linuxserver/overseerr:1.35.06108ed066d4a
typeorm@0.3.12
0.3.31
1
misskey/misskey:12.110.1e08b7c478093
typeorm@0.3.5
0.3.31
1
n8nio/n8n:0.212.0a9195bc499a3
typeorm@0.3.11
0.3.31
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
typeorm@0.2.44
0.3.31
1
redis/redisinsight:2.68019fcf774631
typeorm@0.3.15
0.3.31
1
redis/redisinsight:3.2.055542a762210
typeorm@0.3.26
0.3.31
1
redis/redisinsight:2.46699d341bd329
typeorm@0.3.15
0.3.31
1
redis/redisinsight:3.485562d67a912
typeorm@0.3.26
0.3.31
1
rocketadmin/rocketadmin:1.17.710955ef540b9
typeorm@0.3.28
0.3.31
1
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
typeorm@0.2.38
0.3.31
1
subsquid/substrate-explorer:firesquid0889a857f192
typeorm@0.3.12
0.3.31
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
typeorm@0.2.41
0.3.31
1
twentycrm/twenty:v2.22.0e7d9948bf284
typeorm@0.3.29
0.3.31
1
veecode/devportalc443520aebf7
typeorm@1.0.0
1.1.0
1
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
typeorm@0.3.11
0.3.31
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
typeorm@0.3.19
0.3.31
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
typeorm@0.2.32
0.3.31
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
typeorm@0.3.12
0.3.31
1
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
typeorm@0.3.28
0.3.31
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
typeorm@0.2.39
0.3.31
1
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
typeorm@0.3.28
0.3.31
1
quay.io/seamware/onboarding:0.2.2b406475f9f00
typeorm@0.3.28
0.3.31
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.