StackRadar

CVE-2026-84375

High

Advisory

Published 2 Sept 2026In the index since 9 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
500
of 17,781 indexed, latest versions
Container images
492
deployed by those charts
Fix available
1 of 2
affected packages

js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources

Carried by container images the latest versions of 500 of 17,781 indexed charts deploy, on 492 images.

Affected packageAffected versionsFixed inImages
js-yamlnpm3.5.5, 3.6.1, 3.7.0, 3.9.1+15 more3.15.2, 4.3.2492
node-js-yamldeb4.1.0+dfsg+~4.0.5-7no fix listed1
OSV records
GHSA-2883-xcg3-v3hhUBUNTU-CVE-2026-84375

Charts affected

500 by stars
ChartLatestAffected imagesRadar Score
foremancontane-githubOfficialVerified publisher0.6.01 of 1See more

foreman contane-github 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
contane/foreman:0.5.2efb98bdcc4e9
js-yaml@4.1.0
4.3.2

Open the chart page →

1,152
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
js-yaml@3.14.1
3.15.2

Open the chart page →

17,404
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
js-yaml@4.1.0
4.3.2

Open the chart page →

28,839
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
js-yaml@4.1.0
4.3.2

Open the chart page →

3,451
nightscoutgabe565Verified publisher0.13.01 of 2See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
js-yaml@4.0.0
4.3.2

Open the chart page →

2,521
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
js-yaml@4.1.0
4.3.2

Open the chart page →

22,773
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
js-yaml@3.14.1
3.15.2

Open the chart page →

7,579
zwavejs2mqttgeek-cookbookVerified publisher5.4.21 of 1See more

zwavejs2mqtt geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
js-yaml@3.14.1
3.15.2

Open the chart page →

3,476
ghost-on-kubernetesghost-on-kubernetes-helmVerified publisher1.1.21 of 3See more

ghost-on-kubernetes ghost-on-kubernetes-helm 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
ghcr.io/sredevopsorg/ghost-on-kubernetes:maindd991bafa85e
js-yaml@4.3.0
4.3.2

Open the chart page →

1,447
kongakonga1.1.01 of 1See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
js-yaml@3.13.1
3.15.2

Open the chart page →

5,209
kubeviouskubevious1.2.24 of 7See more

kubevious kubevious 1.2.2

4 of the 7 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
kubevious/backend:1.2.22d9ba6eb46b6
js-yaml@4.1.0
4.3.2
kubevious/collector:1.2.1f58226f9d84e
js-yaml@4.1.0
4.3.2
kubevious/guard:1.2.19bf567704de2
js-yaml@3.14.1
3.15.2
kubevious/parser:1.2.299ae7a5168c2
js-yaml@3.14.1
3.15.2

Open the chart page →

14,204
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
js-yaml@3.13.1
3.15.2

Open the chart page →

6,868
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
enketo/enketo-express:3.0.4dcad9c2273f6
js-yaml@3.14.1
3.15.2
kobotoolbox/kpi:2.022.24dbcacc01bccd4
js-yaml@3.13.1
3.15.2

Open the chart page →

18,517
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
js-yaml@4.1.0
4.3.2

Open the chart page →

7,776
overseerrpree-helm-chartsVerified publisher1.2.01 of 1See more

overseerr pree-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.35.06197516c9d7b
js-yaml@4.1.0
4.3.2

Open the chart page →

2,702
hedgedocrobertobochetVerified publisher1.4.01 of 1See more

hedgedoc robertobochet 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
js-yaml@4.3.1
4.3.2

Open the chart page →

977
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
js-yaml@3.13.1
3.15.2

Open the chart page →

24,488
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
thingsboard/tb-web-ui:3.6.0d388378062cc
js-yaml@4.1.0
4.3.2

Open the chart page →

14,566
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
thmmniii/fbs-qcm-frontend:v1.27.1a347f7f4d144
js-yaml@4.1.0
4.3.2

Open the chart page →

28,534
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
js-yaml@3.14.2
3.15.2

Open the chart page →

4,016
predatorzooz1.7.01 of 1See more

predator zooz 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
zooz/predator:1.6f491d1f7a865
js-yaml@3.13.1
3.15.2

Open the chart page →

2,851
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
js-yaml@3.14.0
3.15.2

Open the chart page →

17,896
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
js-yaml@3.14.0
3.15.2

Open the chart page →

10,730
seerrbdclark-helm-chartsVerified publisher0.1.51 of 1See more

seerr bdclark-helm-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.4.1f4768de5f616
js-yaml@4.1.1
4.3.2

Open the chart page →

1,991
opensearch-dashboardscaptnbpVerified publisher2.2.11 of 1See more

opensearch-dashboards captnbp 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.15.0b7c26c60bfaf
js-yaml@3.14.1
3.15.2

Open the chart page →

1,843
skoonerchristianhuthVerified publisher0.4.01 of 1See more

skooner christianhuth 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
js-yaml@4.1.0
4.3.2

Open the chart page →

1,341
data-fairdata354-helmVerified publisher1.1.27 of 12See more

data-fair data354-helm 1.1.2

7 of the 12 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
js-yaml@3.13.1
3.15.2
ghcr.io/data-fair/data-fair:3cc9498b64b5b
js-yaml@3.14.1
3.15.2
ghcr.io/data-fair/metrics:0a8d40779eeae
js-yaml@3.14.1
3.15.2
ghcr.io/data-fair/notify:3c739b74dabb0
js-yaml@3.14.1
3.15.2
ghcr.io/data-fair/portals:18b621866ceb2
js-yaml@3.15.0
3.15.2
ghcr.io/data-fair/processings:15a9216989707
js-yaml@3.14.1
3.15.2
ghcr.io/data-fair/simple-directory:438a4f32fad82
js-yaml@3.14.1
3.15.2

Open the chart page →

38,346
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
js-yaml@3.14.1
3.15.2

Open the chart page →

5,056
directusdirectus-io2.1.01 of 3See more

directus directus-io 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
directus/directus:12.0.29c8470ea465c
js-yaml@4.1.1
4.3.2

Open the chart page →

7,473
jellystatdjjudas21Verified publisher0.1.121 of 1See more

jellystat djjudas21 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
cyfershepard/jellystat:1.1.11c4e2dfa8bddf
js-yaml@4.2.0
4.3.2

Open the chart page →

1,722
joplin-serverdjjudas21Verified publisher5.5.81 of 1See more

joplin-server djjudas21 5.5.8

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
joplin/server:2.14.2-betab87564ef34e9
js-yaml@3.14.1
3.15.2

Open the chart page →

3,925
domain-lockerdomain-locker0.2.81 of 3See more

domain-locker domain-locker 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
lissy93/domain-locker:latestd3c95edc0a8b
js-yaml@3.14.2
3.15.2

Open the chart page →

1,882
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
library/mongo:6.0.12646902910d6a
js-yaml@3.13.1
3.15.2

Open the chart page →

15,383
enbuildenbuildVerified publisher0.0.503 of 6See more

enbuild enbuild 0.0.50

3 of the 6 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
js-yaml@3.14.2
3.15.2
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
js-yaml@4.1.0
4.3.2
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
js-yaml@4.1.1
4.3.2

Open the chart page →

31,510
ethereumjsethereum-helm-chartsVerified publisher0.1.21 of 2See more

ethereumjs ethereum-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
ethpandaops/ethereumjs:masterfb84b718500f
js-yaml@3.14.2
3.15.2

Open the chart page →

1,442
fastapi-microservice-appfast-api-microservice-app1.3.01 of 4See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

1 of the 4 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
library/mongo:7.0b6421fd6d1c5
js-yaml@3.13.1
3.15.2

Open the chart page →

9,562
ranetogabisonfire0.1.21 of 1See more

raneto gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
js-yaml@3.14.1
3.15.2

Open the chart page →

2,519
ghostgeek-cookbookVerified publisher2.2.01 of 1See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
library/ghost:4.37.0767230c0f263
js-yaml@4.1.0
4.3.2

Open the chart page →

4,260
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
js-yaml@4.1.0
4.3.2

Open the chart page →

15,653
magic-mirrorgeek-cookbookVerified publisher4.4.21 of 1See more

magic-mirror geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
js-yaml@3.14.1
3.15.2

Open the chart page →

4,405
overseerrgeek-cookbookVerified publisher5.4.21 of 1See more

overseerr geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.26.1254d16af8f71
js-yaml@4.0.0
4.3.2

Open the chart page →

3,444
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
js-yaml@3.14.1
3.15.2

Open the chart page →

7,801
zigbee2mqttgeek-cookbookVerified publisher9.4.21 of 1See more

zigbee2mqtt geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
js-yaml@3.14.1
3.15.2

Open the chart page →

2,173
ghostgroundhog2k0.212.121 of 1See more

ghost groundhog2k 0.212.12

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
library/ghost:6.63.0e05bc1169fb2
js-yaml@4.3.0
4.3.2

Open the chart page →

2,000
growthbookgrowthbook5.0.11 of 2See more

growthbook growthbook 5.0.1

1 of the 2 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
growthbook/growthbook:5.0.1f53ead646b5f
js-yaml@4.3.1
4.3.2

Open the chart page →

709
clickstackhdx-oss-v21.1.11 of 5See more

clickstack hdx-oss-v2 1.1.1

1 of the 5 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
library/mongo:5.0.32-focal3b6c281e1c08
js-yaml@3.13.1
3.15.2

Open the chart page →

4,711
pdc-portali4trustVerified publisher2.3.21 of 1See more

pdc-portal i4trust 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
i4trust/pdc-portal:2.0.03e77858e1219
js-yaml@4.0.0
4.3.2

Open the chart page →

2,723
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
js-yaml@4.1.0
4.3.2

Open the chart page →

15,712
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
library/kibana:7.17.3e2e2031c15be
js-yaml@3.14.1
3.15.2

Open the chart page →

17,284
todo-appjunktext-direct1.1.41 of 1See more

todo-app junktext-direct 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-84375.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.5a70936c04aed
js-yaml@3.14.1
3.15.2

Open the chart page →

3,369

Container images carrying it

492 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
js-yaml@4.1.0
4.3.2
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
js-yaml@3.14.1
3.15.2
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
js-yaml@3.14.0
3.15.2
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
js-yaml@3.14.0
3.15.2
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
js-yaml@3.14.0
3.15.2
1
ghcr.io/curium-rocks/k8s-jacoco-operator:maina558ceae6cdb
js-yaml@4.1.0
4.3.2
1
ghcr.io/curium-rocks/k8s-mutating-webhook:mainaaab005242ae
js-yaml@4.1.0
4.3.2
1
ghcr.io/curium-rocks/k8s-validating-webhook:main8344061b2f22
js-yaml@4.1.0
4.3.2
1
ghcr.io/curium-rocks/kube-admission-controller-starter:maine9716966f30b
js-yaml@4.1.0
4.3.2
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
js-yaml@4.1.0
4.3.2
1
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
js-yaml@4.1.0
4.3.2
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
js-yaml@3.14.1
3.15.2
1
ghcr.io/data-fair/metrics:0a8d40779eeae
js-yaml@3.14.1
3.15.2
1
ghcr.io/data-fair/notify:3c739b74dabb0
js-yaml@3.14.1
3.15.2
1
ghcr.io/data-fair/portals:18b621866ceb2
js-yaml@3.15.0
3.15.2
1
ghcr.io/data-fair/processings:15a9216989707
js-yaml@3.14.1
3.15.2
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
js-yaml@3.14.1
3.15.2
1
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
js-yaml@3.13.1
3.15.2
1
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
js-yaml@4.1.0
4.3.2
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
js-yaml@4.1.0
4.3.2
1
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
js-yaml@4.1.0
4.3.2
1
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
js-yaml@4.1.0
4.3.2
1
ghcr.io/gethomepage/homepage:v1.13.1d8d784e50901
js-yaml@4.1.1
4.3.2
1
ghcr.io/hiteshnayak305/cors-proxy:1.2.0e6ff0a131556
js-yaml@4.1.0
4.3.2
1
ghcr.io/immich-app/immich-server:v3.2.0ae13784ffcfc
js-yaml@4.3.0
4.3.2
1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
js-yaml@4.3.0
4.3.2
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
js-yaml@4.1.0
4.3.2
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
js-yaml@4.1.0
4.3.2
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
js-yaml@3.14.0
3.15.2
1
ghcr.io/leoquote/mergeable:latest451706815103
js-yaml@3.14.0
3.15.2
1
ghcr.io/leprechaun/lgtv2mqtt:latestac2e11c41ffb
js-yaml@4.1.0
4.3.2
1
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
js-yaml@3.14.1
3.15.2
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
js-yaml@3.13.1
3.15.2
1
ghcr.io/lockdep/stackradar-scanner:0.3.0dd8a35d50c2d
js-yaml@4.3.1
4.3.2
1
ghcr.io/logtide-dev/logtide-backend:1.0.265463e02f887
js-yaml@4.2.0
4.3.2
1
ghcr.io/logtide-dev/logtide-frontend:1.0.22a7da1451f86
js-yaml@4.2.0
4.3.2
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
js-yaml@4.1.0
4.3.2
1
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
js-yaml@4.1.0
4.3.2
1
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
js-yaml@4.1.0
4.3.2
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
js-yaml@3.14.1
3.15.2
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
js-yaml@3.14.1
3.15.2
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
js-yaml@3.14.1
3.15.2
1
ghcr.io/middleware-labs/odigos-ui:middleware-test-0.0.787120a4561a9
js-yaml@4.1.0
4.3.2
1
ghcr.io/middleware-labs/vision-ui:middleware-test-0.0.853772b7b42c7
js-yaml@4.1.0
4.3.2
1
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
js-yaml@4.1.0
4.3.2
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
js-yaml@4.1.0
4.3.2
1
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
js-yaml@3.14.1
3.15.2
1
ghcr.io/platform-mesh/portal:v0.26.123c937255cac2
js-yaml@4.3.1
4.3.2
1
ghcr.io/quenchworks/images/code-server1749ff57eeef
js-yaml@4.3.1
4.3.2
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
js-yaml@4.1.0
4.3.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.