StackRadarChart IndexLive demo

CVE-2026-82417

Medium

Advisory

Published 31 Aug 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.003; 18th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 725; of 17,787 indexed, latest versions
Container images: 729; deployed by those charts
Fix available: 1 of 2; affected packages

qs: Denial of Service via Attacker Controlled isBuffer

Carried by container images the latest versions of 725 of 17,787 indexed charts deploy, on 729 images.

Affected package	Affected versions	Fixed in	Images
qsnpm	2.3.3, 5.2.0, 6.2.1, 6.3.0+31 more	6.16.0	729
node-qsdeb	2.2.4-1, 2.2.4-1ubuntu1, 6.9.1+ds-1	no fix listed	5

OSV records: GHSA-4mjr-xmp4-gh2g UBUNTU-CVE-2026-82417

Charts affected

725 by stars

Chart

Latest

Affected images

Radar Score

edp-installepmdedp

1 of 7 See more

edp-install epmdedp 3.15.0

1 of the 7 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
epamedp/krci-portal :0.8.0	687acf641097	qs@6.15.2	6.16.0

Open the chart page →

2,034

krci-portalepmdedp

1 of 1 See more

krci-portal epmdedp 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
epamedp/krci-portal :0.8.0	687acf641097	qs@6.15.2	6.16.0

Open the chart page →

839

hedgedocernail-hedgedoc

1 of 1 See more

hedgedoc ernail-hedgedoc 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
quay.io/hedgedoc/hedgedoc :1.10.8	abdb6b08815d	qs@6.5.5	6.16.0

Open the chart page →

1,755

blobscan-indexerethereum-helm-charts

1 of 1 See more

blobscan-indexer ethereum-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
ethpandaops/blobscan-indexer :latest	c58eb9ffe446	qs@6.5.2	6.16.0

Open the chart page →

2,114

ethstatsethereum-helm-charts

1 of 1 See more

ethstats ethereum-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
skylenet/ethstats-server :pow-latest	d757cc016198	qs@6.10.3	6.16.0

Open the chart page →

1,109

ganacheethereum-helm-charts

1 of 2 See more

ganache ethereum-helm-charts 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
trufflesuite/ganache-cli :v6.12.2	c062707f17f3	qs@6.5.2	6.16.0

Open the chart page →

1,608

lodestarethereum-helm-charts

1 of 2 See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
chainsafe/lodestar :latest	5593f6e97912	qs@6.15.2	6.16.0

Open the chart page →

2,534

testnet-faucetethereum-helm-charts

1 of 1 See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
parithoshj/testnet-faucet :9859e0d	cdca426fea6d	qs@2.3.3	6.16.0

Open the chart page →

3,005

bee-localchainethersphere

1 of 1 See more

bee-localchain ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
ethersphere/bee-localchain :latest	0558799ca992	qs@6.12.0	6.16.0

Open the chart page →

2,266

bzz-token-serviceethersphere

1 of 1 See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
ethersphere/bzz-token-service :latest	7624f11a72ad	qs@6.7.0	6.16.0

Open the chart page →

3,260

geth-swapethersphere

1 of 2 See more

geth-swap ethersphere 0.6.3

1 of the 2 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
ethersphere/bee-localchain :latest	0558799ca992	qs@6.12.0	6.16.0

Open the chart page →

4,756

multichain-proxyethersphere

1 of 1 See more

multichain-proxy ethersphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
ethersphere/multichain-proxy :0.0.2	61f5419afbcd	qs@6.13.0	6.16.0

Open the chart page →

795

onboarding-faucetethersphere

1 of 1 See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
ethersphere/onboarding-faucet :0.3.0	513154aab230	qs@6.10.3	6.16.0

Open the chart page →

3,320

exposrexposr

1 of 1 See more

exposr exposr 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
ghcr.io/exposr/exposrd :v0.12.0	561c8f23bdb6	qs@6.10.3	6.16.0

Open the chart page →

570

my-chartexpress-server

1 of 1 See more

my-chart express-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
tawfiq58/express-server :latest	c707555f6853	qs@6.11.0	6.16.0

Open the chart page →

1,113

logentriesfairwinds-incubator

1 of 1 See more

logentries fairwinds-incubator 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
logentries/docker-logentries :0.2.1	f1f90a236998	qs@6.2.1	6.16.0

Open the chart page →

1,597

smeejasfanzynoodle

1 of 1 See more

smeejas fanzynoodle 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
fanzynoodle/smeejas :0.0.1	5f9916c1a287	qs@6.5.2	6.16.0

Open the chart page →

4,127

fickyhelmappfickyhelmapp

1 of 1 See more

fickyhelmapp fickyhelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
tundeficky/nodejs-app :v1.0.0	3cf9a9ce54e8	qs@6.11.0	6.16.0

Open the chart page →

3,311

findery-marketfindery-market

1 of 7 See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
chandanteekinavar/findery-market-user-service :1.0	49e164a9a439	qs@6.13.0	6.16.0

Open the chart page →

7,691

business-api-ecosystemfiware

1 of 4 See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
fiware/biz-ecosystem-logic-proxy :11.20.3	d551a13e8278	qs@6.11.0	6.16.0

Open the chart page →

64,192

consent-managerfiware

1 of 1 See more

consent-manager fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
quay.io/wi_stefan/consent-manager :0.0.6	56399619568b	qs@6.15.3	6.16.0

Open the chart page →

1,795

fdsc-dashboardfiware

1 of 1 See more

fdsc-dashboard fiware 0.6.8

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
quay.io/seamware/fdsc-dashboard :0.6.0	f7706c316c5a	qs@6.15.2	6.16.0

Open the chart page →

705

iotagent-jsonfiware

1 of 1 See more

iotagent-json fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
fiware/iotagent-json :3.1.0	879b21a0d36d	qs@6.10.3	6.16.0

Open the chart page →

937

iotagent-ulfiware

1 of 1 See more

iotagent-ul fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
fiware/iotagent-ul :1.14.0	fe11f55a926d	qs@6.5.2	6.16.0

Open the chart page →

3,337

1 of 1 See more

3,159

onboarding-portalfiware

1 of 1 See more

onboarding-portal fiware 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
quay.io/seamware/onboarding :0.2.2	b406475f9f00	qs@6.14.1	6.16.0

Open the chart page →

1,437

canary-checkerflanksource

1 of 2 See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
flanksource/canary-checker-ui :v1.4.281	764c84e550db	qs@6.11.2	6.16.0

Open the chart page →

4,661

flanksource-uiflanksource

1 of 1 See more

flanksource-ui flanksource 1.4.318

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
flanksource/incident-manager-ui :v1.4.318	891f21df54fb	qs@6.15.3	6.16.0

Open the chart page →

2,480

mission-controlflanksource

1 of 8 See more

mission-control flanksource 0.1.336

1 of the 8 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
public.ecr.aws/flanksource/incident-manager-ui :v1.4.317	fea799d4fb2f	qs@6.15.3	6.16.0

Open the chart page →

8,831

uptime-kumafluent-operator

1 of 1 See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1	3d632903e6af	qs@6.13.0	6.16.0

Open the chart page →

3,474

mod-graphqlfolio-org

1 of 1 See more

mod-graphql folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
folioci/mod-graphql :latest	f0655a6a08fd	qs@6.13.0	6.16.0

Open the chart page →

1,091

flamegabe565

1 of 1 See more

flame gabe565 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
pawelmalak/flame :multiarch2.3.1	9f88b17692a0	qs@6.11.0	6.16.0

Open the chart page →

2,172

scanservjsgabe565

1 of 1 See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	qs@6.11.0	6.16.0

Open the chart page →

13,247

wekan-oldgabisonfire

1 of 1 See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
wekanteam/wekan :v4.22	68a51f0327df	qs@6.5.2	6.16.0

Open the chart page →

5,980

galoy-paygaloymoney

1 of 2 See more

galoy-pay galoymoney 0.11.48

1 of the 2 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
krtk6160/galoy-nostrdigest-pinned	cc82a694f818	qs@6.11.0	6.16.0

Open the chart page →

2,528

rtlgaloymoney

1 of 2 See more

rtl galoymoney 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
shahanafarooqui/rtl :0.13.3	e2195188a451	qs@6.11.0	6.16.0

Open the chart page →

2,090

galoy-paygaloymoney2

1 of 2 See more

galoy-pay galoymoney2 0.11.48

1 of the 2 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
krtk6160/galoy-nostrdigest-pinned	cc82a694f818	qs@6.11.0	6.16.0

Open the chart page →

2,528

rtlgaloymoney2

1 of 2 See more

rtl galoymoney2 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
shahanafarooqui/rtl :0.13.3	e2195188a451	qs@6.11.0	6.16.0

Open the chart page →

2,090

cryptpadgeek-cookbook

1 of 1 See more

cryptpad geek-cookbook 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
promasu/cryptpad :v4.14.1-nginx	51d1142b9f95	qs@6.5.2	6.16.0

Open the chart page →

974

double-takegeek-cookbook

1 of 1 See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
jakowenko/double-take :1.6.0	b858bac9e32a	qs@6.7.0	6.16.0

Open the chart page →

12,270

flaresolverrgeek-cookbook

1 of 1 See more

flaresolverr geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
ghcr.io/flaresolverr/flaresolverr :v1.2.8	96f8c08c0c1b	qs@6.5.2	6.16.0

Open the chart page →

1,870

floodgeek-cookbook

1 of 1 See more

2,000

grocygeek-cookbook

1 of 1 See more

grocy geek-cookbook 8.5.2

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
linuxserver/grocy :version-v3.1.3	291296e66c2a	qs@6.5.2	6.16.0

Open the chart page →

1,043

haste-servergeek-cookbook

1 of 1 See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/haste-server :latest	827aa2f2389d	qs@6.5.2	6.16.0

Open the chart page →

11,042

littlelink-servergeek-cookbook

1 of 1 See more

littlelink-server geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
ghcr.io/techno-tim/littlelink-server :latest	e84ea9d93b60	qs@6.13.0	6.16.0

Open the chart page →

819

nightscoutgeek-cookbook

1 of 1 See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
nightscout/cgm-remote-monitor :14.2.5	00c3b4833f1b	qs@6.7.0	6.16.0

Open the chart page →

4,043

node-redgeek-cookbook

1 of 1 See more

node-red geek-cookbook 10.3.2

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
nodered/node-red :2.2.2	e131dcadfe92	qs@6.5.2	6.16.0

Open the chart page →

2,102

rtorrent-floodgeek-cookbook

1 of 1 See more

rtorrent-flood geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
jesec/rtorrent-flood :latest	f0c894ec459e	qs@6.5.2	6.16.0

Open the chart page →

2,000

shinobigeek-cookbook

1 of 1 See more

shinobi geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
shinobisystems/shinobi :dev	3ca746937856	qs@6.5.2	6.16.0

Open the chart page →

4,591

theloungegeek-cookbook

1 of 1 See more

thelounge geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-82417.

Container image	Digest	Package	Fixed in
thelounge/thelounge :4.2.0-alpine	639978459c3a	qs@6.5.2	6.16.0

Open the chart page →

2,689

Container images carrying it

729 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
maildev/maildev :2.2.1	180ef51f65ee	qs@6.13.0	6.16.0	1
maissacrement/pock8snodejs :0.0.1	6da0db1159da	qs@6.11.0	6.16.0	1
markdegroot/unifi-protect-arm64 :latest	d8445f2a0de6	qs@6.5.3	6.16.0	1
matrixdotorg/matrix-appservice-gitter :latest	0d37b4d42b47	qs@6.5.2	6.16.0	1
mautic/mautic :7-apache	eb8cc73d97e1	qs@6.14.1	6.16.0	1
microcks/microcks-postman-runtime :latest	cb72e46a1b3c	qs@6.4.0	6.16.0	1
milesmcc/shynet :v0.13.1	ba54f7797a6b	qs@6.5.2	6.16.0	1
milesmcc/shynet :v0.12.0	e821e31140f7	qs@6.5.2	6.16.0	1
minddocdev/hubot :0.1.9	6c60b11a4fa7	qs@6.5.2	6.16.0	1
mintproject/ensemble-manager :d5656dbc01623e291564d2894c72f0e7cb2408f4	222e3b941a36	qs@6.5.3	6.16.0	1
mishtinetwork/operator :latest	bb3fe67a5f7c	qs@6.10.3	6.16.0	1
misskey/misskey :12.110.1	e08b7c478093	qs@6.7.0	6.16.0	1
mitchxxx/amazon :21	4e72480ec63a	qs@6.11.0	6.16.0	1
moonrailgun/tianji :1.11.2	b528c8f8fcc4	qs@6.11.2	6.16.0	1
moreillon/api-proxy :2373c195	3739ef6956b5	qs@6.11.0	6.16.0	1
moreillon/api-proxy :latest	d7d4a5463525	qs@6.13.0	6.16.0	1
moreillon/camera-proxy :latest	ce60056b50c2	qs@6.13.0	6.16.0	1
moreillon/face-recognition-fastapi-front :latest	c1072f4ab6aa	qs@6.10.3	6.16.0	1
moreillon/food-manager :latest	e8fd856e593d	qs@6.13.0	6.16.0	1
moreillon/group-manager :latest	3caa8f710ee0	qs@6.14.2	6.16.0	1
moreillon/mqtt-logger :9ffbf718	0a8a7daf56f6	qs@6.10.3	6.16.0	1
moreillon/user-manager-mongoose :v5.0.1	d2ee0423b797	qs@6.11.0	6.16.0	1
mozilla/sentencecollector :2.0.9	1da6ff5c4895	qs@6.5.2	6.16.0	1
mpopoola1/nodejsapp :latest	061fc532de7d	qs@6.11.0	6.16.0	1
muluder/prograncontrollermcord :0.1.8	43b597a93da7	qs@6.5.1	6.16.0	1
n8nio/n8n :2.25.7	761374d4eb84	qs@6.14.2	6.16.0	1
n8nio/n8n :1.86.0	8b39ed5a2de9	qs@6.13.0	6.16.0	1
n8nio/n8n :0.212.0	a9195bc499a3	qs@6.11.0	6.16.0	1
n8nio/n8n :2.36.8	cfe2704ff858	qs@6.15.2	6.16.0	1
n8nio/n8n :1.33.1	dd171d45102a	qs@6.11.2	6.16.0	1
n8nio/n8n :1.115.1	ed16e560c40e	qs@6.11.0	6.16.0	1
n8nio/runners :2.38.4	fedf098f3d40	qs@6.15.2	6.16.0	1
neoskop/papergirl :3.2.6	7f52b5949f03	qs@6.5.3	6.16.0	1
netrisai/controller-web-service-backend :4.6.0-008	6e865080e86c	qs@6.13.0	6.16.0	1
nightscout/cgm-remote-monitor :14.2.5	00c3b4833f1b	qs@6.7.0	6.16.0	1
nightscout/cgm-remote-monitor :15.0.2	ad29ca7a4de6	qs@6.5.2	6.16.0	1
nightscout/cgm-remote-monitor :15.0.3	f604dc4c03ca	qs@6.11.2	6.16.0	1
nocodb/nocodb :latest	4b760f0d2547	qs@6.15.3	6.16.0	1
nocodb/nocodb :0.258.0	6779a4ddedf2	qs@6.13.0	6.16.0	1
nocodb/nocodb :0.301.5	d9516f0bf546	qs@6.15.0	6.16.0	1
nodered/node-red :5.0.4	10f40d0a83e7	qs@6.15.3	6.16.0	1
nodered/node-red :4.1.2	216e7403aab9	qs@6.13.0	6.16.0	1
nodered/node-red :5.0.7	a649dd711d55	qs@6.15.3	6.16.0	1
nodered/node-red :4.1.10-minimal	d73ae167cb9b	qs@6.14.2	6.16.0	1
nodered/node-red :2.2.2	e131dcadfe92	qs@6.5.2	6.16.0	1
nodered/node-red :3.0.2-18	e2632a7a35dd	qs@6.10.3	6.16.0	1
nodered/node-red-docker :0.19.6-v8	070643219ea2	qs@6.5.2	6.16.0	1
nottiey/mynodejswebapp :latest	9c35a24c9eb3	qs@6.11.0	6.16.0	1
ohmyform/ohmyform :1.0.3	afe53f4acdb1	qs@6.10.2	6.16.0	1
okaforuchena/uo-docker :V1.0.0	004e81250f48	qs@6.11.0	6.16.0	1