StackRadar

CVE-2026-82562

Low

Advisory

Published 31 Aug 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
139
of 17,781 indexed, latest versions
Container images
127
deployed by those charts
Fix available
1 of 2
affected packages

qs array-limit bypass via bracket-key comma parsing

Carried by container images the latest versions of 139 of 17,781 indexed charts deploy, on 127 images.

Affected packageAffected versionsFixed inImages
qsnpm6.14.2, 6.15.0, 6.15.1, 6.15.2+1 more6.16.0122
node-qsdeb2.2.4-1, 2.2.4-1ubuntu1, 6.9.1+ds-1no fix listed5
OSV records
GHSA-x5fp-wj9c-mxmxUBUNTU-CVE-2026-82562

Charts affected

139 by stars
ChartLatestAffected imagesRadar Score
activepiecesadnoctemVerified publisher0.5.01 of 1See more

activepieces adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
activepieces/activepieces:0.90.430c10a04fe3d
qs@6.15.2
6.16.0

Open the chart page →

1,055
lhciadnoctemVerified publisher0.1.01 of 1See more

lhci adnoctem 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
qs@6.15.3
6.16.0

Open the chart page →

1,248
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
qs@6.15.3
6.16.0

Open the chart page →

3,820
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
qs@6.14.2
6.16.0

Open the chart page →

30,028
excalidashalekcVerified publisher1.4.01 of 2See more

excalidash alekc 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.0cbdab75f31b2
qs@6.15.2
6.16.0

Open the chart page →

904
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
wettyoss/wetty:latest7423b3d40ba2
qs@6.15.2
6.16.0

Open the chart page →

7,152
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
qs@6.15.0
6.16.0

Open the chart page →

4,083
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
openthread/otbr:latestf307f59f6432
node-qs@2.2.4-1ubuntu1
no fix listed

Open the chart page →

12,779
mcp-for-argocdchristianhuthVerified publisher2.0.01 of 1See more

mcp-for-argocd christianhuth 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/argoproj-labs/mcp-for-argocd:v0.9.0dffc6c719d86
qs@6.15.1
6.16.0

Open the chart page →

1,947
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
node-qs@2.2.4-1
no fix listed

Open the chart page →

27,417
cloudvaultcloudvaultOfficialVerified publisher1.0.21 of 3See more

cloudvault cloudvault 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
shyamkrishna21/cloudvault:latestaf2785f5bb71
qs@6.14.2
6.16.0

Open the chart page →

2,184
stocksalescluster-deploy0.1.31 of 1See more

stocksales cluster-deploy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
foggbh/stocky:latest8b7a2e5ecf4e
qs@6.14.2
6.16.0

Open the chart page →

408
conversor-temperaturaconversor-temperaturaVerified publisher0.1.01 of 1See more

conversor-temperatura conversor-temperatura 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
felipecs8/conversor-temperatura:v1f945423be36d
qs@6.14.2
6.16.0

Open the chart page →

1,527
decisionrules-aksdecisionrules-aksVerified publisher0.2.01 of 2See more

decisionrules-aks decisionrules-aks 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
decisionrules/server:latestf38d8571fa06
qs@6.15.2
6.16.0

Open the chart page →

1,138
decisionrules-eksdecisionrules-eksVerified publisher0.3.01 of 2See more

decisionrules-eks decisionrules-eks 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
decisionrules/server:latestf38d8571fa06
qs@6.15.2
6.16.0

Open the chart page →

1,138
decisionrules-ingressdecisionrules-ingressVerified publisher0.2.01 of 2See more

decisionrules-ingress decisionrules-ingress 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
decisionrules/server:latestf38d8571fa06
qs@6.15.2
6.16.0

Open the chart page →

1,138
decisionrules-ocpdecisionrules-ocpVerified publisher0.1.02 of 4See more

decisionrules-ocp decisionrules-ocp 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
decisionrules/business-intelligence:latest1135a6d4f09b
qs@6.15.2
6.16.0
decisionrules/server:latestf38d8571fa06
qs@6.15.2
6.16.0

Open the chart page →

2,685
backend-servicedev-krishan-dhaka-charts1.0.31 of 1See more

backend-service dev-krishan-dhaka-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
devkrishan001/backend:latestf1c3acadeabe
qs@6.15.1
6.16.0

Open the chart page →

1,264
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
qs@6.15.0
6.16.0

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
qs@6.15.0
6.16.0

Open the chart page →

68,240
dial-admindialVerified publisher0.18.01 of 3See more

dial-admin dial 0.18.0

1 of the 3 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
epam/ai-dial-admin-frontend:0.20.021d91ad74755
qs@6.15.2
6.16.0

Open the chart page →

4,046
node-redegebackVerified publisher2.0.131 of 1See more

node-red egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
nodered/node-red:5.0.410f40d0a83e7
qs@6.15.3
6.16.0

Open the chart page →

975
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
qs@6.15.3
6.16.0

Open the chart page →

30,159
azuriteemberstackVerified publisher1.0.211 of 1See more

azurite emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-storage/azurite:latest830430c1da1a
qs@6.15.3
6.16.0

Open the chart page →

365
edp-installepmdedpOfficialVerified publisher3.15.01 of 7See more

edp-install epmdedp 3.15.0

1 of the 7 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
epamedp/krci-portal:0.8.0687acf641097
qs@6.15.2
6.16.0

Open the chart page →

2,033
krci-portalepmdedpVerified publisher0.8.01 of 1See more

krci-portal epmdedp 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
epamedp/krci-portal:0.8.0687acf641097
qs@6.15.2
6.16.0

Open the chart page →

839
hedgedocernail-hedgedoc5.0.01 of 1See more

hedgedoc ernail-hedgedoc 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
qs@6.15.1
6.16.0

Open the chart page →

1,755
lodestarethereum-helm-chartsVerified publisher1.2.21 of 2See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
chainsafe/lodestar:latest5593f6e97912
qs@6.15.2
6.16.0

Open the chart page →

2,522
consent-managerfiware0.1.21 of 1See more

consent-manager fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
quay.io/wi_stefan/consent-manager:0.0.656399619568b
qs@6.15.3
6.16.0

Open the chart page →

1,847
fdsc-dashboardfiware0.6.81 of 1See more

fdsc-dashboard fiware 0.6.8

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
quay.io/seamware/fdsc-dashboard:0.6.0f7706c316c5a
qs@6.15.2
6.16.0

Open the chart page →

705
flanksource-uiflanksourceVerified publisher1.4.3181 of 1See more

flanksource-ui flanksource 1.4.318

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.318891f21df54fb
qs@6.15.3
6.16.0

Open the chart page →

2,558
mission-controlflanksourceVerified publisher0.1.3361 of 8See more

mission-control flanksource 0.1.336

1 of the 8 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
qs@6.15.3
6.16.0

Open the chart page →

8,902
genieacsgenieacsVerified publisher0.5.11 of 2See more

genieacs genieacs 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
drumsergio/genieacs:1.2.16.028244054e1bf
qs@6.15.0
6.16.0

Open the chart page →

4,259
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
qs@6.15.3
6.16.0

Open the chart page →

9,047
crucixhelm-crucix0.2.01 of 1See more

crucix helm-crucix 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/calesthio/crucix:latest67c5244b6acf
qs@6.15.0
6.16.0

Open the chart page →

778
affinehelmforgeVerified publisher1.0.01 of 3See more

affine helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
qs@6.15.3
6.16.0

Open the chart page →

4,018
bytestashhelmforgeVerified publisher1.0.01 of 1See more

bytestash helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/jordan-dalby/bytestash:1.5.12eb4f736b8cd4
qs@6.15.2
6.16.0

Open the chart page →

739
ghosthelmforgeVerified publisher1.2.61 of 3See more

ghost helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
library/ghost:6.62.0a7a268bbfb7f
qs@6.15.3
6.16.0

Open the chart page →

2,463
hoppscotchhelmforgeVerified publisher1.1.111 of 2See more

hoppscotch helmforge 1.1.11

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2026.8.0d50725df661f
qs@6.15.3
6.16.0

Open the chart page →

2,046
immichhelmforgeVerified publisher1.2.81 of 5See more

immich helmforge 1.2.8

1 of the 5 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
qs@6.15.3
6.16.0

Open the chart page →

11,042
strapihelmforgeVerified publisher2.3.141 of 3See more

strapi helmforge 2.3.14

1 of the 3 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.270e9143d6d92
qs@6.15.3
6.16.0

Open the chart page →

2,061
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
qs@6.15.3
6.16.0

Open the chart page →

30,099
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4d95725b24dbe
qs@6.15.3
6.16.0

Open the chart page →

8,967
nocodbinseefrlab0.2.01 of 1See more

nocodb inseefrlab 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
nocodb/nocodb:latest4b760f0d2547
qs@6.15.3
6.16.0

Open the chart page →

781
iteqiteqOfficialVerified publisher0.3.31 of 3See more

iteq iteq 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/teq-cloud/iteq-api:0.3.3-beta0d9587179ed5
qs@6.15.3
6.16.0

Open the chart page →

775
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
qs@6.14.2
6.16.0

Open the chart page →

3,436
zomboid-serverjanip81-helm-chartsVerified publisher0.1.211 of 3See more

zomboid-server janip81-helm-charts 0.1.21

1 of the 3 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/fpsacha/zomboid-panel:v1.0.6605e16dd56cfb
qs@6.15.3
6.16.0

Open the chart page →

424
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
moreillon/group-manager:latest3caa8f710ee0
qs@6.14.2
6.16.0

Open the chart page →

63,461
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
qs@6.15.2
6.16.0

Open the chart page →

3,092
zwave-js-uik8sonlabVerified publisher0.7.121 of 1See more

zwave-js-ui k8sonlab 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
zwavejs/zwave-js-ui:11.22.314d018bb689e
qs@6.14.2
6.16.0

Open the chart page →

973

Container images carrying it

127 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/ghost:6.22.0-alpine3.23ac533a6988ee
qs@6.15.0
6.16.0
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
qs@6.14.2
6.16.0
1
louislam/uptime-kuma:2.5.33e24e96c89ef
qs@6.15.3
6.16.0
1
louislam/uptime-kuma:2.4.091e963bfda56
qs@6.14.2
6.16.0
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
node-qs@6.9.1+ds-1
no fix listed
1
moreillon/group-manager:latest3caa8f710ee0
qs@6.14.2
6.16.0
1
n8nio/n8n:2.25.7761374d4eb84
qs@6.14.2
6.16.0
1
n8nio/n8n:2.36.8cfe2704ff858
qs@6.15.2
6.16.0
1
n8nio/runners:2.38.4fedf098f3d40
qs@6.15.2
6.16.0
1
nocodb/nocodb:latest4b760f0d2547
qs@6.15.3
6.16.0
1
nocodb/nocodb:0.301.5d9516f0bf546
qs@6.15.0
6.16.0
1
nodered/node-red:5.0.410f40d0a83e7
qs@6.15.3
6.16.0
1
nodered/node-red:5.0.7a649dd711d55
qs@6.15.3
6.16.0
1
nodered/node-red:4.1.10-minimald73ae167cb9b
qs@6.14.2
6.16.0
1
openthread/otbr:latestf307f59f6432
node-qs@2.2.4-1ubuntu1
no fix listed
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
node-qs@2.2.4-1ubuntu1
no fix listed
1
oryd/kratos-selfservice-ui-node:v26.2.046a7bac1ad0c
qs@6.14.2
6.16.0
1
otwld/velero-ui:0.10.2d1954b759e47
qs@6.15.3
6.16.0
1
penpotapp/mcp:2.17.284f3f07ead11
qs@6.15.3
6.16.0
1
rocketadmin/rocketadmin:1.17.710955ef540b9
qs@6.15.1
6.16.0
1
rocketchat/account-service:8.6.144af8ac4e711
qs@6.15.2
6.16.0
1
rocketchat/authorization-service:8.6.16bc18fb5d0e5
qs@6.15.2
6.16.0
1
rocketchat/ddp-streamer-service:8.6.1819771c4abe4
qs@6.15.2
6.16.0
1
rocketchat/presence-service:8.6.1c1170bdfe797
qs@6.15.2
6.16.0
1
shyamkrishna21/cloudvault:latestaf2785f5bb71
qs@6.14.2
6.16.0
1
shyamkrishna21/shopsync:latest3998b83def53
qs@6.14.2
6.16.0
1
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
qs@6.15.3
6.16.0
1
stnsmith/fossflow:lateste448ab346cb3
qs@6.15.3
6.16.0
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
qs@6.15.2
6.16.0
1
supabase/studio:latest94a2a9d2906e
qs@6.15.2
6.16.0
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
node-qs@6.9.1+ds-1
no fix listed
1
swimmwatch/cloakbrowser-mcp:1.13.0d48c705a58c8
qs@6.15.3
6.16.0
1
tensorzero/ui:2026.6.0f2563d54724e
qs@6.15.0
6.16.0
1
treskon/portrait-ui:DEV-lateste7970783bc8d
qs@6.15.3
6.16.0
1
twentycrm/twenty:v2.22.0e7d9948bf284
qs@6.15.2
6.16.0
1
unleashorg/unleash-enterprise:7.5.0245aeba40053
qs@6.14.2
6.16.0
1
unleashorg/unleash-server:7.5.09adb37e399ba
qs@6.14.2
6.16.0
1
veecode/devportalc443520aebf7
qs@6.14.2
6.16.0
1
wettyoss/wetty:latest7423b3d40ba2
qs@6.15.2
6.16.0
1
zimengxiong/excalidash-backend:0.6.0cbdab75f31b2
qs@6.15.2
6.16.0
1
zwavejs/zwave-js-ui:11.22.314d018bb689e
qs@6.14.2
6.16.0
1
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
qs@6.15.3
6.16.0
1
ghcr.io/argoproj-labs/mcp-for-argocd:v0.9.0dffc6c719d86
qs@6.15.1
6.16.0
1
ghcr.io/backstage/backstage:latest792e262ea504
qs@6.15.3
6.16.0
1
ghcr.io/blessingnator/keycloak-mcn-backend:2.0.5967470f05472
qs@6.14.2
6.16.0
1
ghcr.io/bluesky-social/pds:0.4d95725b24dbe
qs@6.15.3
6.16.0
1
ghcr.io/calesthio/crucix:latest67c5244b6acf
qs@6.15.0
6.16.0
1
ghcr.io/cameri/nostream:main8726533b9e69
qs@6.14.2
6.16.0
1
ghcr.io/data-fair/portals:18b621866ceb2
qs@6.15.3
6.16.0
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
qs@6.15.2
6.16.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.