StackRadarChart IndexLive demo

CVE-2026-94482

High

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 115; of 18,232 indexed, latest versions
Container images: 109; deployed by those charts
Fix available: 1 of 1; affected package

Next.js: Denial of Service in App Router using Server Actions

Carried by container images the latest versions of 115 of 18,232 indexed charts deploy, on 109 images.

Affected package	Affected versions	Fixed in	Images
nextnpm	13.0.7, 13.2.4, 13.4.12, 13.5.2+55 more	15.5.28, 16.4.1	109

OSV records: GHSA-p3m5-59mp-jv5r

Charts affected

115 by stars

Chart

Latest

Affected images

Radar Score

homepagequench-homepage

1 of 1 See more

homepage quench-homepage 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/homepagedigest-pinned	e9d1b2799f06	next@16.3.8	16.4.1

Open the chart page →

78

kratos-selfservice-ui-noderadar-base

1 of 1 See more

kratos-selfservice-ui-node radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container image	Digest	Package	Fixed in
oryd/kratos-selfservice-ui-node :v0.13.0-20	d454c21c11bc	next@13.5.3	15.5.28

Open the chart page →

3,127

radar-self-enrolment-uiradar-base

1 of 1 See more

radar-self-enrolment-ui radar-base 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container image	Digest	Package	Fixed in
ghcr.io/radar-base/radar-self-enrolment-ui :0.1.0	b9a7cd3cc099	next@15.5.4	15.5.28

Open the chart page →

1,646

karakeeprtomik-helm-charts

1 of 3 See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-94482.

Container image	Digest	Package	Fixed in
ghcr.io/karakeep-app/karakeep :0.26.0	f575a34ed3f8	next@14.2.25	15.5.28

Open the chart page →

6,483

rybbitrybbit-helm

1 of 7 See more

rybbit rybbit-helm 1.3.2

1 of the 7 container images this version deploys carry CVE-2026-94482.

Container image	Digest	Package	Fixed in
ghcr.io/rybbit-io/rybbit-client :latest	9a3bbb2e837a	next@16.2.6	16.4.1

Open the chart page →

9,183

seerr-chartseerr-chart

1 of 1 See more

seerr-chart seerr-chart 3.10.1

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container image	Digest	Package	Fixed in
ghcr.io/seerr-team/seerr :v3.5.1	d8fab675b55a	next@16.2.6	16.4.1

Open the chart page →

2,212

counter-dhlsikademo

1 of 3 See more

counter-dhl sikademo 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-94482.

Container image	Digest	Package	Fixed in
ghcr.io/ondrejsika/counter-frontend :latest	c4166d2eb8eb	next@13.0.7	15.5.28

Open the chart page →

5,381

supabaseteochenglim

1 of 13 See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2026-94482.

Container image	Digest	Package	Fixed in
supabase/studio :latest	d878dcd9dba7	next@16.3.6	16.4.1

Open the chart page →

32,654

homepagethis-is-tobi-helm-charts

1 of 1 See more

homepage this-is-tobi-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container image	Digest	Package	Fixed in
ghcr.io/gethomepage/homepage :v2.4.0	643bd0be730d	next@16.3.3	16.4.1

Open the chart page →

779

saleor-appstrieb-work

3 of 5 See more

saleor-apps trieb-work 0.6.0

3 of the 5 container images this version deploys carry CVE-2026-94482.

Container image	Digest	Package	Fixed in
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed :1.23.1	1d435b4ab372	next@15.2.4	15.5.28
ghcr.io/trieb-work/saleor-apps/saleor-app-search :1.24.3	28edefb6c92d	next@15.2.4	15.5.28
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp :1.4.3	57a06bfba327	next@15.2.4	15.5.28

Open the chart page →

9,644

homepageunknowniq

1 of 2 See more

homepage unknowniq 1.8.8

1 of the 2 container images this version deploys carry CVE-2026-94482.

Container image	Digest	Package	Fixed in
ghcr.io/gethomepage/homepage :v2.2.0	753eeb0cc22a	next@16.3.3	16.4.1

Open the chart page →

795

homarrvhdirk

1 of 1 See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container image	Digest	Package	Fixed in
ghcr.io/ajnart/homarr :latest	e103abadfb52	next@13.5.11	15.5.28

Open the chart page →

3,550

websitewaldo-vision

1 of 2 See more

website waldo-vision 0.33.0

1 of the 2 container images this version deploys carry CVE-2026-94482.

Container image	Digest	Package	Fixed in
ghcr.io/waldo-vision/web :v0.3.6	5bbc7647df07	next@13.2.4	15.5.28

Open the chart page →

4,316

sirenwateim

1 of 1 See more

6,439

welcome-clientwelcome-client

1 of 1 See more

welcome-client welcome-client 26.0.0

1 of the 1 container images this version deploys carry CVE-2026-94482.

Container image	Digest	Package	Fixed in
lucassandin/welcome-client :latest	48468b1ccd16	next@14.1.4	15.5.28

Open the chart page →

1,682

Container images carrying it

109 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/wachd/wachd :0.4.18	05b05c56da94	next@16.2.4	16.4.1	1
ghcr.io/waldo-vision/web :v0.3.6	5bbc7647df07	next@13.2.4	15.5.28	1
ghcr.io/wasilak/kube-ingress-dash :0.3.1	ff55992f905c	next@16.0.3	16.4.1	1
ghcr.io/wundergraph/cosmo/studio :0.111.0	454f4384713a	next@15.2.4	15.5.28	1
ghcr.io/zoriya/kyoo_front :4.7.1	d7f76c9c65d9	next@14.2.5	15.5.28	1
public.ecr.aws/g4a0y2u8/unifie-store :staging-19925	a2057fabc948	next@15.0.1	15.5.28	1
quay.io/kuberay/dashboard :v1.7.1	49b50dcc8d53	next@15.5.18	15.5.28	1
quay.io/wraft/wraft-frontend :latest	f1bbbd5e9bb9	next@14.2.32	15.5.28	1
registry.gitlab.com/dyff/dyff-frontend :0.21.3	61b0c77980b0	next@15.5.18	15.5.28	1