StackRadar

CVE-2026-92599

High

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
58
of 17,957 indexed, latest versions
Container images
59
deployed by those charts
Fix available
1 of 1
affected package

joi: Quadratic regular-expression backtracking in `Joi.string().isoDate()`

Carried by container images the latest versions of 58 of 17,957 indexed charts deploy, on 59 images.

Affected packageAffected versionsFixed inImages
joinpm17.4.0, 17.4.1, 17.4.2, 17.6.0+17 more17.13.7, 18.2.659
OSV records
GHSA-6h2x-m376-mqjq

Charts affected

58 by stars
ChartLatestAffected imagesRadar Score
unleashunleash5.6.81 of 2See more

unleash unleash 5.6.8

1 of the 2 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
unleashorg/unleash-server:7.5.09adb37e399ba
joi@18.0.2
18.2.6

Open the chart page →

1,977
budibasebudibase0.0.0-master2 of 7See more

budibase budibase 0.0.0-master

2 of the 7 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
budibase/apps:3.41.344fe6feab985
joi@18.2.1
18.2.6
budibase/worker:3.41.3de5e2e560ce8
joi@18.2.1
18.2.6

Open the chart page →

11,186
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
joi@17.13.3
17.13.7

Open the chart page →

31,338
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
joi@17.9.2
17.13.7

Open the chart page →

2,992
kubebadgeskubebadges0.1.31 of 2See more

kubebadges kubebadges 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
shieldsio/shields:nextf0fccbce3b75
joi@18.2.5
18.2.6

Open the chart page →

1,675
kubeviouskubevious1.2.24 of 7See more

kubevious kubevious 1.2.2

4 of the 7 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
kubevious/backend:1.2.22d9ba6eb46b6
joi@17.9.2
17.13.7
kubevious/collector:1.2.1f58226f9d84e
joi@17.9.2
17.13.7
kubevious/guard:1.2.19bf567704de2
joi@17.6.0
17.13.7
kubevious/parser:1.2.299ae7a5168c2
joi@17.9.2
17.13.7

Open the chart page →

14,670
mstreamnicholaswildeVerified publisher2.1.21 of 1See more

mstream nicholaswilde 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/mstream:version-v5.2.522c012bcc43c
joi@17.4.2
17.13.7

Open the chart page →

4,457
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
joi@17.4.2
17.13.7

Open the chart page →

104,670
directusdirectus-io2.1.01 of 3See more

directus directus-io 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
directus/directus:12.0.29c8470ea465c
joi@18.0.1
18.2.6

Open the chart page →

8,280
globalpingglobalpingVerified publisher1.0.111 of 1See more

globalping globalping 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
globalping/globalping-probe:latestb8469caf783a
joi@17.13.3
17.13.7

Open the chart page →

619
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
library/kibana:7.17.3e2e2031c15be
joi@17.4.0
17.13.7

Open the chart page →

17,965
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
joi@18.1.2
18.2.6

Open the chart page →

6,073
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
joi@17.4.0
17.13.7

Open the chart page →

7,226
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
joi@17.13.3
17.13.7

Open the chart page →

3,207
jellyseerralexmorbo-jellyseerrVerified publisher1.0.31 of 1See more

jellyseerr alexmorbo-jellyseerr 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
joi@17.13.3
17.13.7

Open the chart page →

3,559
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
joi@17.6.0
17.13.7

Open the chart page →

2,471
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
joi@17.6.0
17.13.7

Open the chart page →

2,514
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
joi@17.6.0
17.13.7
assistiot/smart-orchestrator_enabler:latest89f37e88c871
joi@17.6.0
17.13.7
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
joi@17.6.0
17.13.7

Open the chart page →

47,425
codiac-cluster-agent-chartcodiac-cluster-agent1.0.381 of 1See more

codiac-cluster-agent-chart codiac-cluster-agent 1.0.38

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
codiacimages/codiac-cluster-agent:1.0.380cd44ca7a7ee
joi@18.0.2
18.2.6

Open the chart page →

1,684
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
joi@17.13.3
17.13.7

Open the chart page →

3,933
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
joi@17.13.3
17.13.7

Open the chart page →

4,858
exposrexposr0.12.01 of 1See more

exposr exposr 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
ghcr.io/exposr/exposrd:v0.12.0561c8f23bdb6
joi@17.6.0
17.13.7

Open the chart page →

590
consent-managerfiware0.1.21 of 1See more

consent-manager fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
quay.io/wi_stefan/consent-manager:0.0.656399619568b
joi@17.13.6
17.13.7

Open the chart page →

2,163
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
library/kibana:7.17.150172f1c538e7
joi@17.7.1
17.13.7

Open the chart page →

35,858
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
joi@17.11.0
17.13.7

Open the chart page →

3,851
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
joi@17.7.0
17.13.7

Open the chart page →

67,864
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
joi@17.4.1
17.13.7

Open the chart page →

5,849
seerrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

seerr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
joi@17.13.3
17.13.7

Open the chart page →

2,813
kubevious-agentkubevious1.0.41 of 1See more

kubevious-agent kubevious 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
kubevious/parser:1.0.151acf1a1f0b47
joi@17.4.1
17.13.7

Open the chart page →

2,031
workload-operatorkubevious0.0.31 of 1See more

workload-operator kubevious 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
kubevious/workload-operator:1.0.20b0f4c507eb6
joi@17.9.1
17.13.7

Open the chart page →

2,109
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest4538137bc5af
joi@17.13.3
17.13.7

Open the chart page →

3,817
efklovemew67Verified publisher0.0.11 of 2See more

efk lovemew67 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
nshou/elasticsearch-kibana:kibana7a1d1e36814d1
joi@17.4.0
17.13.7

Open the chart page →

3,989
wudm0sh1-helm-charts0.2.01 of 1See more

wud m0sh1-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
getwud/wud:8.1.1b1cd01c43839
joi@17.13.3
17.13.7

Open the chart page →

6,860
middleware-odigosmiddleware-labsVerified publisher0.2.411 of 6See more

middleware-odigos middleware-labs 0.2.41

1 of the 6 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
joi@17.8.3
17.13.7

Open the chart page →

8,490
middleware-visionmiddleware-labsVerified publisher0.2.651 of 6See more

middleware-vision middleware-labs 0.2.65

1 of the 6 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/vision-odiglet:middleware-test-0.0.3bce34c98668e
joi@17.8.4
17.13.7

Open the chart page →

8,482
account-lookup-servicemojaloop13.0.02 of 4See more

account-lookup-service mojaloop 13.0.0

2 of the 4 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
joi@17.4.2
17.13.7
mojaloop/event-sidecar:v11.0.189b8ab71b74b
joi@17.4.0
17.13.7

Open the chart page →

12,278
account-lookup-service-adminmojaloop13.0.02 of 4See more

account-lookup-service-admin mojaloop 13.0.0

2 of the 4 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
joi@17.4.2
17.13.7
mojaloop/event-sidecar:v11.0.189b8ab71b74b
joi@17.4.0
17.13.7

Open the chart page →

12,278
admin-api-svcmojaloop12.0.02 of 4See more

admin-api-svc mojaloop 12.0.0

2 of the 4 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
mojaloop/central-ledger:v13.14.01abc8a7aa71c
joi@17.4.0
17.13.7
mojaloop/event-sidecar:v11.0.189b8ab71b74b
joi@17.4.0
17.13.7

Open the chart page →

12,700
bofmojaloop5.1.61 of 1See more

bof mojaloop 5.1.6

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
joi@18.0.1
18.2.6

Open the chart page →

2,736
finance-portalmojaloop5.1.43 of 11See more

finance-portal mojaloop 5.1.4

3 of the 11 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
joi@17.13.3
17.13.7
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
joi@17.13.3
17.13.7
mojaloop/role-assignment-service:v2.1.0def4bf273721
joi@17.12.0
17.13.7

Open the chart page →

16,206
fspiop-transfer-api-svcmojaloop12.0.12 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

2 of the 3 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
mojaloop/event-sidecar:v11.0.189b8ab71b74b
joi@17.4.0
17.13.7
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
joi@17.4.0
17.13.7

Open the chart page →

12,053
mojaloopmojaloop14.0.04 of 6See more

mojaloop mojaloop 14.0.0

4 of the 6 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
joi@17.4.2
17.13.7
mojaloop/central-ledger:v13.14.01abc8a7aa71c
joi@17.4.0
17.13.7
mojaloop/event-sidecar:v11.0.189b8ab71b74b
joi@17.4.0
17.13.7
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
joi@17.4.0
17.13.7

Open the chart page →

20,038
reporting-events-processor-svcmojaloop3.5.31 of 1See more

reporting-events-processor-svc mojaloop 3.5.3

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
joi@17.13.3
17.13.7

Open the chart page →

2,897
reporting-hub-bop-experience-api-svcmojaloop1.0.31 of 1See more

reporting-hub-bop-experience-api-svc mojaloop 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
joi@17.13.3
17.13.7

Open the chart page →

2,716
role-assignment-servicemojaloop3.1.01 of 1See more

role-assignment-service mojaloop 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
mojaloop/role-assignment-service:v2.1.0def4bf273721
joi@17.12.0
17.13.7

Open the chart page →

2,436
security-role-perm-operator-svcmojaloop3.0.01 of 1See more

security-role-perm-operator-svc mojaloop 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
joi@18.0.1
18.2.6

Open the chart page →

2,736
user-manager-mongodbmoreillonVerified publisher0.6.21 of 4See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
joi@17.11.0
17.13.7

Open the chart page →

27,079
user-manager-neo4jmoreillonVerified publisher0.9.71 of 6See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
joi@17.7.0
17.13.7

Open the chart page →

32,253
papergirlneoskop3.2.61 of 5See more

papergirl neoskop 3.2.6

1 of the 5 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
neoskop/papergirl:3.2.67f52b5949f03
joi@17.12.0
17.13.7

Open the chart page →

2,809
praecoone-acre-fundVerified publisher0.2.01 of 3See more

praeco one-acre-fund 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-92599.

Container imageDigestPackageFixed in
praecoapp/elastalert-server:202302195a0d8715e8b1
joi@17.8.0
17.13.7

Open the chart page →

9,205

Container images carrying it

59 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/exposr/exposrd:v0.12.0561c8f23bdb6
joi@17.6.0
17.13.7
1
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
joi@17.13.3
17.13.7
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
joi@17.11.0
17.13.7
1
ghcr.io/linuxserver/mstream:version-v5.2.522c012bcc43c
joi@17.4.2
17.13.7
1
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
joi@17.8.3
17.13.7
1
ghcr.io/middleware-labs/vision-odiglet:middleware-test-0.0.3bce34c98668e
joi@17.8.4
17.13.7
1
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
joi@17.13.3
17.13.7
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
joi@17.11.0
17.13.7
1
quay.io/wi_stefan/consent-manager:0.0.656399619568b
joi@17.13.6
17.13.7
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.