StackRadar

CVE-2026-94482

High

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
115
of 18,232 indexed, latest versions
Container images
109
deployed by those charts
Fix available
1 of 1
affected package

Next.js: Denial of Service in App Router using Server Actions

Carried by container images the latest versions of 115 of 18,232 indexed charts deploy, on 109 images.

Affected packageAffected versionsFixed inImages
nextnpm13.0.7, 13.2.4, 13.4.12, 13.5.2+55 more15.5.28, 16.4.1109
OSV records
GHSA-p3m5-59mp-jv5r

Charts affected

115 by stars
ChartLatestAffected imagesRadar Score
dial-admindialVerified publisher0.20.01 of 3See more

dial-admin dial 0.20.0

1 of the 3 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
epam/ai-dial-admin-frontend:0.22.07bceacad3de2
next@15.5.27
15.5.28

Open the chart page →

3,715
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
langgenius/dify-web:1.0.0d64914ff0d6d
next@14.2.15
15.5.28

Open the chart page →

18,929
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
next@14.2.6
15.5.28

Open the chart page →

3,415
dyff-frontenddyff-frontendVerified publisher0.21.31 of 1See more

dyff-frontend dyff-frontend 0.21.3

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-frontend:0.21.361b0c77980b0
next@15.5.18
15.5.28

Open the chart page →

1,344
dashboardedu1.0.01 of 1See more

dashboard edu 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
sysnet4admin/dashboard:bluec5bd3bb1b5a6
next@14.2.3
15.5.28

Open the chart page →

1,657
mandefactlyVerified publisher0.5.181 of 3See more

mande factly 0.5.18

1 of the 3 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
factly/mande-web:0.34.1742355964b0e
next@13.5.3
15.5.28

Open the chart page →

5,725
fauxgpufauxgpuVerified publisher0.2.41 of 4See more

fauxgpu fauxgpu 0.2.4

1 of the 4 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/devops-dojo7/fauxgpu/web:0.2.4691dd15d6bca
next@16.3.1
16.4.1

Open the chart page →

4,017
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
next@14.2.2
15.5.28

Open the chart page →

5,575
flanksource-uiflanksourceVerified publisher1.4.3541 of 1See more

flanksource-ui flanksource 1.4.354

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3542bb089c79fc0
next@15.5.20
15.5.28

Open the chart page →

3,559
mission-controlflanksourceVerified publisher0.1.3391 of 8See more

mission-control flanksource 0.1.339

1 of the 8 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.3228d17f0c08b20
next@15.5.20
15.5.28

Open the chart page →

11,832
linkwardenfmjstudios0.3.61 of 2See more

linkwarden fmjstudios 0.3.6

1 of the 2 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.5.398214faf09f7
next@13.4.12
15.5.28

Open the chart page →

3,951
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-fe:v3.2.05eaad43bd6c5
next@16.0.10
16.4.1

Open the chart page →

17,711
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
next@14.2.5
15.5.28
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
next@14.2.5
15.5.28

Open the chart page →

196,819
lobe-chathelm-charts-darox0.1.561 of 1See more

lobe-chat helm-charts-darox 0.1.56

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
lobehub/lobe-chat:1.96.9da0c21fefcd3
next@15.3.4
15.5.28

Open the chart page →

684
bulwark-mailhelmforgeVerified publisher1.1.11 of 1See more

bulwark-mail helmforge 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/bulwarkmail/webmail:1.15.0-always6345944b2cba
next@16.3.8
16.4.1

Open the chart page →

27
homarrhelmforgeVerified publisher1.2.141 of 1See more

homarr helmforge 1.2.14

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/homarr-labs/homarr:v2.6.01e077fc77d3a
next@16.3.6
16.4.1

Open the chart page →

218
opencuthelmforgeVerified publisher1.1.141 of 5See more

opencut helmforge 1.1.14

1 of the 5 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
helmforge/opencut:v0.3.0bf11156e0ab5
next@16.1.3
16.4.1

Open the chart page →

3,732
reactive-resumehelmforgeVerified publisher1.0.21 of 4See more

reactive-resume helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
next@16.3.0
16.4.1

Open the chart page →

4,156
self-learning-platformhelm-self-learning-platformVerified publisher1.1.21 of 1See more

self-learning-platform helm-self-learning-platform 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
devopsiaci/self-learning-platform:1.3.18b295edf28f1c
next@16.3.8
16.4.1

Open the chart page →

721
multicaicoretechVerified publisher0.6.61 of 4See more

multica icoretech 0.6.6

1 of the 4 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/multica-ai/multica-web:v0.6.5f38d02584705
next@16.3.8
16.4.1

Open the chart page →

2,542
kagentkagent0.10.41 of 6See more

kagent kagent 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/ui:0.10.4a6edf70c6e8e
next@16.3.5
16.4.1

Open the chart page →

4,155
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
next@15.5.7
15.5.28

Open the chart page →

3,923
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
next@15.4.8
15.5.28

Open the chart page →

10,189
homepagekubernetes-homelab-helm-chartsVerified publisher0.2.01 of 1See more

homepage kubernetes-homelab-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/gethomepage/homepage:v1.13.2a0b71c8e7572
next@16.2.6
16.4.1

Open the chart page →

1,159
seerrkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 1See more

seerr kubernetes-homelab-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.027602401178d
next@16.2.6
16.4.1

Open the chart page →

2,370
umamikubernetes-homelab-helm-chartsVerified publisher0.3.01 of 3See more

umami kubernetes-homelab-helm-charts 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.4.085909afc45bd
next@16.3.4
16.4.1

Open the chart page →

1,044
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
next@13.5.2
15.5.28

Open the chart page →

2,895
helm-pilotlbenicio-communityVerified publisher0.2.41 of 1See more

helm-pilot lbenicio-community 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
lbenicio/helm-pilot:0.2.54594a2632510
next@16.2.9
16.4.1

Open the chart page →

903
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest91edd5620e51
next@14.2.25
15.5.28

Open the chart page →

3,208
dashboardleechistest1.0.01 of 1See more

dashboard leechistest 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
sysnet4admin/dashboard:bluec5bd3bb1b5a6
next@14.2.3
15.5.28

Open the chart page →

1,657
libredb-studiolibredb-studio-oci0.1.1011 of 1See more

libredb-studio libredb-studio-oci 0.1.101

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:1.0.00cb0177dd278
next@16.4.0
16.4.1

Open the chart page →

1,463
lynxpromptlynxpromptVerified publisher0.1.41 of 3See more

lynxprompt lynxprompt 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
drumsergio/lynxprompt:2.1.40e66bb00c2696
next@16.3.8
16.4.1

Open the chart page →

915
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
next@13.5.6
15.5.28

Open the chart page →

5,460
homepagem0sh1-helm-charts0.3.11 of 1See more

homepage m0sh1-helm-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/gethomepage/homepage:v1.11.0b129cb0f674b
next@15.5.11
15.5.28

Open the chart page →

2,015
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/absmach/magistrala/ui-smq:latestea7e7f0e293e
next@15.3.4
15.5.28

Open the chart page →

35,057
homarrmedia-servarrVerified publisher0.56.01 of 1See more

homarr media-servarr 0.56.0

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/homarr-labs/homarr:v1.77.2d60120a04536
next@16.3.0-preview.9
16.4.1

Open the chart page →

864
miot-appmicroboxlabs0.3.31 of 1See more

miot-app microboxlabs 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-app:0.5.203cc10a496ced
next@16.2.6
16.4.1

Open the chart page →

700
miot-docsmicroboxlabs0.1.11 of 1See more

miot-docs microboxlabs 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-docs:latestd3431480deea
next@16.3.5
16.4.1

Open the chart page →

314
miot-stackmicroboxlabs0.2.31 of 2See more

miot-stack microboxlabs 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-app:0.5.203cc10a496ced
next@16.2.6
16.4.1

Open the chart page →

700
modulariotmicroboxlabs0.11.12 of 4See more

modulariot microboxlabs 0.11.1

2 of the 4 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-app:0.5.203cc10a496ced
next@16.2.6
16.4.1
ghcr.io/microboxlabs/miot-docs:latest893259699070
next@16.3.5
16.4.1

Open the chart page →

1,069
umamimt1905028.1.41 of 3See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.0.328f263fe06f7
next@15.5.9
15.5.28

Open the chart page →

4,271
neosyncneosyncVerified publisher0.5.411 of 3See more

neosync neosync 0.5.41

1 of the 3 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
next@15.3.1
15.5.28

Open the chart page →

8,885
appneosync-appVerified publisher0.5.411 of 1See more

app neosync-app 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
next@15.3.1
15.5.28

Open the chart page →

1,709
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
next@14.2.4
15.5.28

Open the chart page →

6,160
alquimia-studioopenshift0.2.01 of 1See more

alquimia-studio openshift 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
alquimiaai/studio:certification38a1f0341982
next@15.2.4
15.5.28

Open the chart page →

2,688
dify-enterpriseopenshift3.9.82 of 13See more

dify-enterprise openshift 3.9.8

2 of the 13 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
langgenius/dify-ee-enterprise-frontend:3.9.8-ubi98dd9de6b6190
next@16.2.6
16.4.1
langgenius/dify-ee-web:3.9.8-ubi9ba1dd1d0bcea
next@16.2.6
16.4.1

Open the chart page →

9,820
console-webovrclk-20.1.11 of 1See more

console-web ovrclk-2 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/akash-network/deploy-web:2.46.0ac540172c120
next@14.2.23
15.5.28

Open the chart page →

3,112
provider-consoleovrclk-20.1.01 of 1See more

provider-console ovrclk-2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/akash-network/provider-console:1.0.04d4c19a8d3ff
next@14.2.23
15.5.28

Open the chart page →

2,591
podscopepodscope0.2.31 of 1See more

podscope podscope 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
ghcr.io/kadajett/podscope:0.2.3eeedf17112d7
next@16.0.3
16.4.1

Open the chart page →

1,638
pumperlypumperlyVerified publisher0.2.01 of 3See more

pumperly pumperly 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-94482.

Container imageDigestPackageFixed in
drumsergio/pumperly:1.17.0f7efe5fc03f3
next@16.3.6
16.4.1

Open the chart page →

3,004

Container images carrying it

109 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
next@14.1.1
15.5.28
1
ghcr.io/absmach/magistrala/ui-smq:latestea7e7f0e293e
next@15.3.4
15.5.28
1
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
next@13.4.12
15.5.28
1
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
next@13.4.12
15.5.28
1
ghcr.io/ajnart/homarr:lateste103abadfb52
next@13.5.11
15.5.28
1
ghcr.io/akash-network/deploy-web:2.46.0ac540172c120
next@14.2.23
15.5.28
1
ghcr.io/akash-network/provider-console:1.0.04d4c19a8d3ff
next@14.2.23
15.5.28
1
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
next@14.1.4
15.5.28
1
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
next@16.3.0
16.4.1
1
ghcr.io/bulwarkmail/webmail:1.15.0-always6345944b2cba
next@16.3.8
16.4.1
1
ghcr.io/bulwarkmail/webmail:1.6.0f0a266506fcf
next@16.2.4
16.4.1
1
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
next@15.2.3
15.5.28
1
ghcr.io/devops-dojo7/fauxgpu/web:0.2.4691dd15d6bca
next@16.3.1
16.4.1
1
ghcr.io/ding113/claude-code-hub:latestfa7c6f5428c2
next@16.3.3
16.4.1
1
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
next@14.2.25
15.5.28
1
ghcr.io/gethomepage/homepage:latest:v2.4.0643bd0be730d
next@16.3.3
16.4.1
1
ghcr.io/gethomepage/homepage:latest:v2.2.0753eeb0cc22a
next@16.3.3
16.4.1
1
ghcr.io/gethomepage/homepage:v1.13.2a0b71c8e7572
next@16.2.6
16.4.1
1
ghcr.io/gethomepage/homepage:v1.11.0b129cb0f674b
next@15.5.11
15.5.28
1
ghcr.io/glassflow/glassflow-etl-fe:v3.2.05eaad43bd6c5
next@16.0.10
16.4.1
1
ghcr.io/homarr-labs/homarr:v2.6.01e077fc77d3a
next@16.3.6
16.4.1
1
ghcr.io/homarr-labs/homarr:v1.77.2d60120a04536
next@16.3.0-preview.9
16.4.1
1
ghcr.io/homarr-labs/homarr:v2.7.0f532ce7cb2a3
next@16.3.6
16.4.1
1
ghcr.io/itsmylife44/cliproxyapi-dashboard/dashboard:0.1.9088f02aa3034e
next@16.1.6
16.4.1
1
ghcr.io/kadajett/podscope:0.2.3eeedf17112d7
next@16.0.3
16.4.1
1
ghcr.io/kagent-dev/kagent/ui:0.10.4a6edf70c6e8e
next@16.3.5
16.4.1
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
next@15.3.3
15.5.28
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
next@14.2.25
15.5.28
1
ghcr.io/kikplate/kikplate-web:main34bbb61e8e42
next@15.5.14
15.5.28
1
ghcr.io/laki-n/laki-ui:v1.6.0e51253617271
next@16.3.0
16.4.1
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
next@15.5.21
15.5.28
1
ghcr.io/linkwarden/linkwarden:v2.5.398214faf09f7
next@13.4.12
15.5.28
1
ghcr.io/lockdep/stackradar-client:0.2.01ef6c7132778
next@16.4.0
16.4.1
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
next@13.5.6
15.5.28
1
ghcr.io/microboxlabs/miot-docs:latest893259699070
next@16.3.5
16.4.1
1
ghcr.io/microboxlabs/miot-docs:latestd3431480deea
next@16.3.5
16.4.1
1
ghcr.io/multica-ai/multica-web:v0.6.5f38d02584705
next@16.3.8
16.4.1
1
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
next@13.0.7
15.5.28
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
next@14.2.4
15.5.28
1
ghcr.io/open-telemetry/demo:3.1.0-frontend28358db46206
next@16.3.5
16.4.1
1
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
next@14.2.5
15.5.28
1
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
next@14.2.5
15.5.28
1
ghcr.io/quenchworks/images/homepagee9d1b2799f06
next@16.3.8
16.4.1
1
ghcr.io/radar-base/radar-self-enrolment-ui:0.1.0b9a7cd3cc099
next@15.5.4
15.5.28
1
ghcr.io/rybbit-io/rybbit-client:latest9a3bbb2e837a
next@16.2.6
16.4.1
1
ghcr.io/seerr-team/seerr:v3.5.1d8fab675b55a
next@16.2.6
16.4.1
1
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
next@15.2.4
15.5.28
1
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
next@15.2.4
15.5.28
1
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
next@15.2.4
15.5.28
1
ghcr.io/umami-software/umami:3.0.328f263fe06f7
next@15.5.9
15.5.28
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.