StackRadar

CVE-2026-93690

High

Advisory

Published 18 Sept 2026In the index since 19 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.005
39th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
6
of 17,832 indexed, latest versions
Container images
6
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 6 of 17,832 indexed charts deploy, on 6 images.

Affected packageAffected versionsFixed inImages
node-uri-jsdeb4.2.2+dfsg-5, 4.4.0+dfsg-8no fix listed6
OSV records
DEBIAN-CVE-2026-93690UBUNTU-CVE-2026-93690

Charts affected

6 by stars
ChartLatestAffected imagesRadar Score
dawarichcogitriVerified publisher2.9.11 of 3See more

dawarich cogitri 2.9.1

1 of the 3 container images this version deploys carry CVE-2026-93690.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.19757df73d3b4
node-uri-js@4.4.0+dfsg-8
no fix listed

Open the chart page →

6,037
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2026-93690.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
node-uri-js@4.4.0+dfsg-8
no fix listed

Open the chart page →

13,605
geomapfishgeomapfish0.8.01 of 3See more

geomapfish geomapfish 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-93690.

Container imageDigestPackageFixed in
camptocamp/geomapfishapp-geoportal:latestae874f70cc16
node-uri-js@4.4.0+dfsg-8
no fix listed

Open the chart page →

6,393
dawarichhelmforgeVerified publisher1.0.11 of 4See more

dawarich helmforge 1.0.1

1 of the 4 container images this version deploys carry CVE-2026-93690.

Container imageDigestPackageFixed in
freikin/dawarich:1.14.511826c67e4b1
node-uri-js@4.4.0+dfsg-8
no fix listed

Open the chart page →

10,891
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-93690.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
node-uri-js@4.2.2+dfsg-5
no fix listed

Open the chart page →

89,206
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-93690.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
node-uri-js@4.2.2+dfsg-5
no fix listed

Open the chart page →

11,153

Container images carrying it

6 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
camptocamp/geomapfishapp-geoportal:latestae874f70cc16
node-uri-js@4.4.0+dfsg-8
no fix listed
1
freikin/dawarich:1.14.511826c67e4b1
node-uri-js@4.4.0+dfsg-8
no fix listed
1
freikin/dawarich:1.15.19757df73d3b4
node-uri-js@4.4.0+dfsg-8
no fix listed
1
jupyterhub/jupyterhub:5.4.63974ba945e65
node-uri-js@4.4.0+dfsg-8
no fix listed
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
node-uri-js@4.2.2+dfsg-5
no fix listed
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
node-uri-js@4.2.2+dfsg-5
no fix listed
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.