StackRadar

CVE-2026-82562

Low

Advisory

Published 31 Aug 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
139
of 17,781 indexed, latest versions
Container images
127
deployed by those charts
Fix available
1 of 2
affected packages

qs array-limit bypass via bracket-key comma parsing

Carried by container images the latest versions of 139 of 17,781 indexed charts deploy, on 127 images.

Affected packageAffected versionsFixed inImages
qsnpm6.14.2, 6.15.0, 6.15.1, 6.15.2+1 more6.16.0122
node-qsdeb2.2.4-1, 2.2.4-1ubuntu1, 6.9.1+ds-1no fix listed5
OSV records
GHSA-x5fp-wj9c-mxmxUBUNTU-CVE-2026-82562

Charts affected

139 by stars
ChartLatestAffected imagesRadar Score
activepiecesadnoctemVerified publisher0.5.01 of 1See more

activepieces adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
activepieces/activepieces:0.90.430c10a04fe3d
qs@6.15.2
6.16.0

Open the chart page →

1,055
lhciadnoctemVerified publisher0.1.01 of 1See more

lhci adnoctem 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
qs@6.15.3
6.16.0

Open the chart page →

1,248
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
qs@6.15.3
6.16.0

Open the chart page →

3,820
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
qs@6.14.2
6.16.0

Open the chart page →

30,028
excalidashalekcVerified publisher1.4.01 of 2See more

excalidash alekc 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.0cbdab75f31b2
qs@6.15.2
6.16.0

Open the chart page →

904
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
wettyoss/wetty:latest7423b3d40ba2
qs@6.15.2
6.16.0

Open the chart page →

7,152
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
qs@6.15.0
6.16.0

Open the chart page →

4,083
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
openthread/otbr:latestf307f59f6432
node-qs@2.2.4-1ubuntu1
no fix listed

Open the chart page →

12,779
mcp-for-argocdchristianhuthVerified publisher2.0.01 of 1See more

mcp-for-argocd christianhuth 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/argoproj-labs/mcp-for-argocd:v0.9.0dffc6c719d86
qs@6.15.1
6.16.0

Open the chart page →

1,947
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
node-qs@2.2.4-1
no fix listed

Open the chart page →

27,417
cloudvaultcloudvaultOfficialVerified publisher1.0.21 of 3See more

cloudvault cloudvault 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
shyamkrishna21/cloudvault:latestaf2785f5bb71
qs@6.14.2
6.16.0

Open the chart page →

2,184
stocksalescluster-deploy0.1.31 of 1See more

stocksales cluster-deploy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
foggbh/stocky:latest8b7a2e5ecf4e
qs@6.14.2
6.16.0

Open the chart page →

408
conversor-temperaturaconversor-temperaturaVerified publisher0.1.01 of 1See more

conversor-temperatura conversor-temperatura 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
felipecs8/conversor-temperatura:v1f945423be36d
qs@6.14.2
6.16.0

Open the chart page →

1,527
decisionrules-aksdecisionrules-aksVerified publisher0.2.01 of 2See more

decisionrules-aks decisionrules-aks 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
decisionrules/server:latestf38d8571fa06
qs@6.15.2
6.16.0

Open the chart page →

1,138
decisionrules-eksdecisionrules-eksVerified publisher0.3.01 of 2See more

decisionrules-eks decisionrules-eks 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
decisionrules/server:latestf38d8571fa06
qs@6.15.2
6.16.0

Open the chart page →

1,138
decisionrules-ingressdecisionrules-ingressVerified publisher0.2.01 of 2See more

decisionrules-ingress decisionrules-ingress 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
decisionrules/server:latestf38d8571fa06
qs@6.15.2
6.16.0

Open the chart page →

1,138
decisionrules-ocpdecisionrules-ocpVerified publisher0.1.02 of 4See more

decisionrules-ocp decisionrules-ocp 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
decisionrules/business-intelligence:latest1135a6d4f09b
qs@6.15.2
6.16.0
decisionrules/server:latestf38d8571fa06
qs@6.15.2
6.16.0

Open the chart page →

2,685
backend-servicedev-krishan-dhaka-charts1.0.31 of 1See more

backend-service dev-krishan-dhaka-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
devkrishan001/backend:latestf1c3acadeabe
qs@6.15.1
6.16.0

Open the chart page →

1,264
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
qs@6.15.0
6.16.0

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
qs@6.15.0
6.16.0

Open the chart page →

68,240
dial-admindialVerified publisher0.18.01 of 3See more

dial-admin dial 0.18.0

1 of the 3 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
epam/ai-dial-admin-frontend:0.20.021d91ad74755
qs@6.15.2
6.16.0

Open the chart page →

4,046
node-redegebackVerified publisher2.0.131 of 1See more

node-red egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
nodered/node-red:5.0.410f40d0a83e7
qs@6.15.3
6.16.0

Open the chart page →

975
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
qs@6.15.3
6.16.0

Open the chart page →

30,159
azuriteemberstackVerified publisher1.0.211 of 1See more

azurite emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-storage/azurite:latest830430c1da1a
qs@6.15.3
6.16.0

Open the chart page →

365
edp-installepmdedpOfficialVerified publisher3.15.01 of 7See more

edp-install epmdedp 3.15.0

1 of the 7 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
epamedp/krci-portal:0.8.0687acf641097
qs@6.15.2
6.16.0

Open the chart page →

2,033
krci-portalepmdedpVerified publisher0.8.01 of 1See more

krci-portal epmdedp 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
epamedp/krci-portal:0.8.0687acf641097
qs@6.15.2
6.16.0

Open the chart page →

839
hedgedocernail-hedgedoc5.0.01 of 1See more

hedgedoc ernail-hedgedoc 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
qs@6.15.1
6.16.0

Open the chart page →

1,755
lodestarethereum-helm-chartsVerified publisher1.2.21 of 2See more

lodestar ethereum-helm-charts 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
chainsafe/lodestar:latest5593f6e97912
qs@6.15.2
6.16.0

Open the chart page →

2,522
consent-managerfiware0.1.21 of 1See more

consent-manager fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
quay.io/wi_stefan/consent-manager:0.0.656399619568b
qs@6.15.3
6.16.0

Open the chart page →

1,847
fdsc-dashboardfiware0.6.81 of 1See more

fdsc-dashboard fiware 0.6.8

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
quay.io/seamware/fdsc-dashboard:0.6.0f7706c316c5a
qs@6.15.2
6.16.0

Open the chart page →

705
flanksource-uiflanksourceVerified publisher1.4.3181 of 1See more

flanksource-ui flanksource 1.4.318

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.318891f21df54fb
qs@6.15.3
6.16.0

Open the chart page →

2,558
mission-controlflanksourceVerified publisher0.1.3361 of 8See more

mission-control flanksource 0.1.336

1 of the 8 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
qs@6.15.3
6.16.0

Open the chart page →

8,902
genieacsgenieacsVerified publisher0.5.11 of 2See more

genieacs genieacs 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
drumsergio/genieacs:1.2.16.028244054e1bf
qs@6.15.0
6.16.0

Open the chart page →

4,259
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
qs@6.15.3
6.16.0

Open the chart page →

9,047
crucixhelm-crucix0.2.01 of 1See more

crucix helm-crucix 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/calesthio/crucix:latest67c5244b6acf
qs@6.15.0
6.16.0

Open the chart page →

778
affinehelmforgeVerified publisher1.0.01 of 3See more

affine helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
qs@6.15.3
6.16.0

Open the chart page →

4,018
bytestashhelmforgeVerified publisher1.0.01 of 1See more

bytestash helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/jordan-dalby/bytestash:1.5.12eb4f736b8cd4
qs@6.15.2
6.16.0

Open the chart page →

739
ghosthelmforgeVerified publisher1.2.61 of 3See more

ghost helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
library/ghost:6.62.0a7a268bbfb7f
qs@6.15.3
6.16.0

Open the chart page →

2,463
hoppscotchhelmforgeVerified publisher1.1.111 of 2See more

hoppscotch helmforge 1.1.11

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2026.8.0d50725df661f
qs@6.15.3
6.16.0

Open the chart page →

2,046
immichhelmforgeVerified publisher1.2.81 of 5See more

immich helmforge 1.2.8

1 of the 5 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
qs@6.15.3
6.16.0

Open the chart page →

11,042
strapihelmforgeVerified publisher2.3.141 of 3See more

strapi helmforge 2.3.14

1 of the 3 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.270e9143d6d92
qs@6.15.3
6.16.0

Open the chart page →

2,061
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
qs@6.15.3
6.16.0

Open the chart page →

30,099
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4d95725b24dbe
qs@6.15.3
6.16.0

Open the chart page →

8,967
nocodbinseefrlab0.2.01 of 1See more

nocodb inseefrlab 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
nocodb/nocodb:latest4b760f0d2547
qs@6.15.3
6.16.0

Open the chart page →

781
iteqiteqOfficialVerified publisher0.3.31 of 3See more

iteq iteq 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/teq-cloud/iteq-api:0.3.3-beta0d9587179ed5
qs@6.15.3
6.16.0

Open the chart page →

775
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
qs@6.14.2
6.16.0

Open the chart page →

3,436
zomboid-serverjanip81-helm-chartsVerified publisher0.1.211 of 3See more

zomboid-server janip81-helm-charts 0.1.21

1 of the 3 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
ghcr.io/fpsacha/zomboid-panel:v1.0.6605e16dd56cfb
qs@6.15.3
6.16.0

Open the chart page →

424
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
moreillon/group-manager:latest3caa8f710ee0
qs@6.14.2
6.16.0

Open the chart page →

63,461
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
qs@6.15.2
6.16.0

Open the chart page →

3,092
zwave-js-uik8sonlabVerified publisher0.7.121 of 1See more

zwave-js-ui k8sonlab 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-82562.

Container imageDigestPackageFixed in
zwavejs/zwave-js-ui:11.22.314d018bb689e
qs@6.14.2
6.16.0

Open the chart page →

973

Container images carrying it

127 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
decisionrules/server:latestf38d8571fa06
qs@6.15.2
6.16.0
4
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
qs@6.15.0
6.16.0
3
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
qs@6.15.3
6.16.0
3
actualbudget/actual-server:26.9.0552beab3dec8
qs@6.15.2
6.16.0
2
epamedp/krci-portal:0.8.0687acf641097
qs@6.15.2
6.16.0
2
kutt/kutt:latest:v3.2.6fa3d24a89b04
qs@6.15.2
6.16.0
2
library/ghost:6.63.0e05bc1169fb2
qs@6.15.3
6.16.0
2
louislam/uptime-kuma:2.5.4917318f9d7be
qs@6.14.2
6.16.0
2
louislam/uptime-kuma:2.3.29aeb4e51d038
qs@6.15.1
6.16.0
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
qs@6.15.3
6.16.0
2
n8nio/n8n:2.36.714c4285bc303
qs@6.15.2
6.16.0
2
n8nio/n8n:2.38.45d9f0cc5672b
qs@6.15.2
6.16.0
2
requarks/wiki:2:latest68f0d1848261
qs@6.15.1
6.16.0
2
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
qs@6.14.2
6.16.0
2
verdaccio/verdaccio:6.10.209b403888c8f
qs@6.15.3
6.16.0
2
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
qs@6.15.3
6.16.0
2
aaronshaf/dynamodb-admin:latestac41724cd997
qs@6.15.2
6.16.0
1
activepieces/activepieces:0.90.430c10a04fe3d
qs@6.15.2
6.16.0
1
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
qs@6.14.2
6.16.0
1
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
qs@6.14.2
6.16.0
1
budibase/apps:3.41.344fe6feab985
qs@6.15.1
6.16.0
1
budibase/worker:3.41.3de5e2e560ce8
qs@6.15.0
6.16.0
1
chainsafe/lodestar:latest5593f6e97912
qs@6.15.2
6.16.0
1
chocobozzz/peertube:v8.1.5052712130691
qs@6.15.0
6.16.0
1
cyfershepard/jellystat:1.1.11c4e2dfa8bddf
qs@6.15.2
6.16.0
1
decisionrules/business-intelligence:latest1135a6d4f09b
qs@6.15.2
6.16.0
1
devkrishan001/backend:latestf1c3acadeabe
qs@6.15.1
6.16.0
1
directus/directus:12.0.29c8470ea465c
qs@6.15.2
6.16.0
1
diygod/rsshub:latest1d4b508b6357
qs@6.14.2
6.16.0
1
docmost/docmost:0.95.041c8d777cf23
qs@6.14.2
6.16.0
1
drumsergio/genieacs:1.2.16.028244054e1bf
qs@6.15.0
6.16.0
1
epam/ai-dial-admin-frontend:0.20.021d91ad74755
qs@6.15.2
6.16.0
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
node-qs@2.2.4-1
no fix listed
1
etherpad/etherpad:latest6020e7b57f4b
qs@6.15.3
6.16.0
1
etherpad/etherpad:2.7.2b723fe5f2594
qs@6.15.1
6.16.0
1
ethpandaops/ethereumjs:masterfb84b718500f
qs@6.14.2
6.16.0
1
felipecs8/conversor-temperatura:v1f945423be36d
qs@6.14.2
6.16.0
1
flanksource/incident-manager-ui:v1.4.318891f21df54fb
qs@6.15.3
6.16.0
1
foggbh/stocky:latest8b7a2e5ecf4e
qs@6.14.2
6.16.0
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
qs@6.15.1
6.16.0
1
growthbook/growthbook:5.0.1f53ead646b5f
qs@6.15.2
6.16.0
1
helmforge/strapi-base:5.52.270e9143d6d92
qs@6.15.3
6.16.0
1
hoppscotch/hoppscotch:2026.8.0d50725df661f
qs@6.15.3
6.16.0
1
kitware/cdash:v5.3.0d7767d9b9da4
qs@6.14.2
6.16.0
1
lbenicio/stremio-web:latest732f9003de33
qs@6.15.1
6.16.0
1
library/ghost:6.37.01ef2e532ca4d
qs@6.14.2
6.16.0
1
library/ghost:6.25.12654b1e90413
qs@6.15.0
6.16.0
1
library/ghost:6.41.129773d6be407
qs@6.15.2
6.16.0
1
library/ghost:6.39.0-alpine77196da4b0df
qs@6.14.2
6.16.0
1
library/ghost:6.62.0a7a268bbfb7f
qs@6.15.3
6.16.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.