StackRadar

CVE-2026-97058

Medium

Advisory

Published 24 Sept 2026In the index since 25 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
574
of 18,026 indexed, latest versions
Container images
593
deployed by those charts
Fix available
None
affected packages

sprintf-js vulnerable to denial of service through unbounded precision specifiers

Carried by container images the latest versions of 574 of 18,026 indexed charts deploy, on 593 images.

Affected packageAffected versionsFixed inImages
sprintf-jsnpm1.0.3, 1.1.1, 1.1.2, 1.1.3no fix listed593
node-sprintf-jsdeb1.1.2+ds1+~1.1.2-1no fix listed2
OSV records
GHSA-hp3w-g68c-fv3cUBUNTU-CVE-2026-97058

Charts affected

574 by stars
ChartLatestAffected imagesRadar Score
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/tale/headplane:0.5.50dbc52cffc19
sprintf-js@1.1.3
no fix listed

Open the chart page →

9,745
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
sprintf-js@1.1.3
no fix listed

Open the chart page →

7,990
community-solid-servercommunity-solid-server3.0.01 of 1See more

community-solid-server community-solid-server 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
solidproject/community-server:6.0.2ccc4acb7e9a1
sprintf-js@1.0.3
no fix listed

Open the chart page →

1,819
foremancontane-githubOfficialVerified publisher0.6.01 of 1See more

foreman contane-github 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
contane/foreman:0.5.2efb98bdcc4e9
sprintf-js@1.1.3
no fix listed

Open the chart page →

1,612
convertigoconvertigoOfficialVerified publisher8.4.51 of 5See more

convertigo convertigo 8.4.5

1 of the 5 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
sprintf-js@1.0.3
no fix listed

Open the chart page →

17,283
cosmocosmo-platformOfficialVerified publisher0.20.03 of 10See more

cosmo cosmo-platform 0.20.0

3 of the 10 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/cdn:0.14.1d86fcf169f15
sprintf-js@1.1.3
no fix listed
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
sprintf-js@1.1.3
no fix listed
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
sprintf-js@1.1.3
no fix listed

Open the chart page →

34,276
hubotdecayofmind1.0.21 of 3See more

hubot decayofmind 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
decayofmind/hubot:3.3.21e18e92fe694
sprintf-js@1.1.2
no fix listed

Open the chart page →

2,703
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
sprintf-js@1.1.3
no fix listed

Open the chart page →

4,195
nightscoutgabe565Verified publisher0.13.01 of 2See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
sprintf-js@1.0.3
no fix listed

Open the chart page →

2,762
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
sprintf-js@1.0.3
no fix listed

Open the chart page →

9,161
kongakonga1.1.01 of 1See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
sprintf-js@1.0.3
no fix listed

Open the chart page →

5,345
kubeviouskubevious1.2.23 of 7See more

kubevious kubevious 1.2.2

3 of the 7 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
kubevious/collector:1.2.1f58226f9d84e
sprintf-js@1.0.3
no fix listed
kubevious/guard:1.2.19bf567704de2
sprintf-js@1.0.3
no fix listed
kubevious/parser:1.2.299ae7a5168c2
sprintf-js@1.0.3
no fix listed

Open the chart page →

17,557
activepiecesmeyerchartsVerified publisher0.1.61 of 1See more

activepieces meyercharts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
activepieces/activepieces:0.23.0c26188b44e62
sprintf-js@1.1.3
no fix listed

Open the chart page →

3,450
mstreamnicholaswildeVerified publisher2.1.21 of 1See more

mstream nicholaswilde 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/mstream:version-v5.2.522c012bcc43c
sprintf-js@1.0.3
no fix listed

Open the chart page →

5,643
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
sprintf-js@1.0.3
no fix listed

Open the chart page →

7,851
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
enketo/enketo-express:3.0.4dcad9c2273f6
sprintf-js@1.0.3
no fix listed
kobotoolbox/kpi:2.022.24dbcacc01bccd4
sprintf-js@1.0.3
no fix listed

Open the chart page →

23,691
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
sprintf-js@1.1.2
no fix listed

Open the chart page →

8,503
overseerrpree-helm-chartsVerified publisher1.2.01 of 1See more

overseerr pree-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.35.06197516c9d7b
sprintf-js@1.1.3
no fix listed

Open the chart page →

2,992
hedgedocrobertobochetVerified publisher1.4.01 of 1See more

hedgedoc robertobochet 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
sprintf-js@1.0.3
no fix listed

Open the chart page →

1,450
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
sprintf-js@1.0.3
no fix listed

Open the chart page →

102,426
soketisoketi2.0.01 of 1See more

soketi soketi 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
quay.io/soketi/soketi:1.6-16-debian713223456cf1
sprintf-js@1.1.2
no fix listed

Open the chart page →

1,891
feedbacksystemthm-mni-iiVerified publisher0.48.12 of 14See more

feedbacksystem thm-mni-ii 0.48.1

2 of the 14 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/thm-mni-ii/fbs-qcm-backend:v2.0.6f1a7afffedab
sprintf-js@1.1.3
no fix listed
ghcr.io/thm-mni-ii/fbs-qcm-frontend:v2.0.6fc8ab4ce0654
sprintf-js@1.1.3
no fix listed

Open the chart page →

29,135
wgerwgerOfficialVerified publisher2.0.01 of 7See more

wger wger 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
journeyapps/powersync-service:latest413a0c813e96
sprintf-js@1.1.3
no fix listed

Open the chart page →

8,934
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
sprintf-js@1.1.3
no fix listed

Open the chart page →

5,210
predatorzooz1.7.01 of 1See more

predator zooz 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
zooz/predator:1.6f491d1f7a865
sprintf-js@1.1.2
no fix listed

Open the chart page →

3,168
dbgateappscodeVerified publisher2026.3.301 of 1See more

dbgate appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
dbgate/dbgate:7.2.0-alpine287077002446
sprintf-js@1.1.3
no fix listed

Open the chart page →

942
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
sprintf-js@1.0.3
no fix listed

Open the chart page →

20,196
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
sprintf-js@1.0.3
no fix listed

Open the chart page →

12,246
seerrbdclark-helm-chartsVerified publisher0.1.51 of 1See more

seerr bdclark-helm-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.4.1f4768de5f616
sprintf-js@1.1.3
no fix listed

Open the chart page →

2,452
pysequilabiodatageeks0.1.31 of 7See more

pysequila biodatageeks 0.1.3

1 of the 7 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
jupyterhub/configurable-http-proxy:4.2.1b328f93ad125
sprintf-js@1.0.3
no fix listed

Open the chart page →

87,922
opensearch-dashboardscaptnbpVerified publisher2.2.11 of 1See more

opensearch-dashboards captnbp 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.15.0b7c26c60bfaf
sprintf-js@1.1.2
no fix listed

Open the chart page →

2,045
maildevchristianhuthVerified publisher1.6.01 of 1See more

maildev christianhuth 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
maildev/maildev:2.2.1180ef51f65ee
sprintf-js@1.1.3
no fix listed

Open the chart page →

1,591
dawarichcogitriVerified publisher2.9.21 of 3See more

dawarich cogitri 2.9.2

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.2e58334ca5697
sprintf-js@1.1.2
no fix listed

Open the chart page →

6,974
data-fairdata354-helmVerified publisher1.1.26 of 12See more

data-fair data354-helm 1.1.2

6 of the 12 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
sprintf-js@1.1.3
no fix listed
ghcr.io/data-fair/metrics:0a8d40779eeae
sprintf-js@1.0.3
no fix listed
ghcr.io/data-fair/notify:3c739b74dabb0
sprintf-js@1.0.3
no fix listed
ghcr.io/data-fair/portals:18b621866ceb2
sprintf-js@1.0.3
no fix listed
ghcr.io/data-fair/processings:15a9216989707
sprintf-js@1.0.3
no fix listed
ghcr.io/data-fair/simple-directory:438a4f32fad82
sprintf-js@1.0.3
no fix listed

Open the chart page →

42,584
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
sprintf-js@1.0.3
no fix listed

Open the chart page →

5,735
matomodigitalist-open-cloud-matomo12.0.211 of 3See more

matomo digitalist-open-cloud-matomo 12.0.21

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
digitalist/matomo:5.12.0bc4aeeaea769
sprintf-js@1.1.3
no fix listed

Open the chart page →

3,495
directusdirectus-io2.1.01 of 3See more

directus directus-io 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
directus/directus:12.0.29c8470ea465c
sprintf-js@1.1.2
no fix listed

Open the chart page →

9,353
joplin-serverdjjudas21Verified publisher6.0.01 of 1See more

joplin-server djjudas21 6.0.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
joplin/server:3.7.23f7b852959aa
sprintf-js@1.1.3
no fix listed

Open the chart page →

2,964
domain-lockerdomain-locker0.3.11 of 2See more

domain-locker domain-locker 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
lissy93/domain-locker:latest58a903b2cdd9
sprintf-js@1.0.3
no fix listed

Open the chart page →

1,035
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
sprintf-js@1.1.3
no fix listed

Open the chart page →

75,225
enbuildenbuildVerified publisher0.0.503 of 6See more

enbuild enbuild 0.0.50

3 of the 6 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
sprintf-js@1.0.3
no fix listed
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
sprintf-js@1.0.3
no fix listed
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
sprintf-js@1.0.3
no fix listed

Open the chart page →

35,965
ethereumjsethereum-helm-chartsVerified publisher0.1.21 of 2See more

ethereumjs ethereum-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ethpandaops/ethereumjs:masterfb84b718500f
sprintf-js@1.1.3
no fix listed

Open the chart page →

2,103
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
sprintf-js@1.1.3
no fix listed

Open the chart page →

13,128
ranetogabisonfire0.1.21 of 1See more

raneto gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
sprintf-js@1.1.2
no fix listed

Open the chart page →

2,660
magic-mirrorgeek-cookbookVerified publisher4.4.21 of 1See more

magic-mirror geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
sprintf-js@1.1.2
no fix listed

Open the chart page →

5,717
overseerrgeek-cookbookVerified publisher5.4.21 of 1See more

overseerr geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.26.1254d16af8f71
sprintf-js@1.1.2
no fix listed

Open the chart page →

3,650
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
sprintf-js@1.0.3
no fix listed

Open the chart page →

8,710
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
sprintf-js@1.1.2
no fix listed

Open the chart page →

6,582
zigbee2mqttgeek-cookbookVerified publisher9.4.21 of 1See more

zigbee2mqtt geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
sprintf-js@1.0.3
no fix listed

Open the chart page →

2,258
zwavejs2mqttgeek-cookbookVerified publisher5.4.21 of 1See more

zwavejs2mqtt geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
sprintf-js@1.0.3
no fix listed

Open the chart page →

3,623

Container images carrying it

593 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
requarks/wiki:latestfffff288a52f
sprintf-js@1.0.3
no fix listed
2
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
sprintf-js@1.0.3
no fix listed
2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
sprintf-js@1.1.3
no fix listed
2
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
sprintf-js@1.0.3
no fix listed
2
statsd/statsd:v0.8.6dab129e74c25
sprintf-js@1.0.3
no fix listed
2
sysnet4admin/dashboard:bluec5bd3bb1b5a6
sprintf-js@1.1.3
no fix listed
2
taskrabbit/elasticsearch-dump:latestc967fe68b9c7
sprintf-js@1.1.2
no fix listed
2
temporalio/web:1.14.033cfa863d8ce
sprintf-js@1.0.3
no fix listed
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
sprintf-js@1.1.2
no fix listed
2
ubercadence/web:v3.29.58564a5b44a6d
sprintf-js@1.0.3
no fix listed
2
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
sprintf-js@1.1.3
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
sprintf-js@1.1.3
no fix listed
2
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
sprintf-js@1.1.3
no fix listed
2
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
sprintf-js@1.0.3
no fix listed
2
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
sprintf-js@1.1.3
no fix listed
2
ghcr.io/seerr-team/seerr:latest:v3.5.027602401178d
sprintf-js@1.1.3
no fix listed
2
ghcr.io/wg-easy/wg-easy:145f26407fd2ed
sprintf-js@1.1.3
no fix listed
2
activepieces/activepieces:0.91.058414dfc94c4
sprintf-js@1.0.3
no fix listed
1
activepieces/activepieces:0.28.0a12efde0c535
sprintf-js@1.1.3
no fix listed
1
activepieces/activepieces:0.23.0c26188b44e62
sprintf-js@1.1.3
no fix listed
1
actualbudget/actual-server:25.3.158fecd9088b7
sprintf-js@1.1.3
no fix listed
1
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
sprintf-js@1.1.3
no fix listed
1
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
sprintf-js@1.1.3
no fix listed
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
sprintf-js@1.1.3
no fix listed
1
alazidis/stornx:1.1.1602d4f7f090c
sprintf-js@1.1.3
no fix listed
1
alquimiaai/studio:certification38a1f0341982
sprintf-js@1.1.3
no fix listed
1
amazon/opendistro-for-elasticsearch-kibana:1.4.05126e2e79a1f
sprintf-js@1.0.3
no fix listed
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
sprintf-js@1.0.3
no fix listed
1
anamskenneth/recipe_backend:2025-06-079b7d2cd389b7
sprintf-js@1.1.3
no fix listed
1
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
sprintf-js@1.1.3
no fix listed
1
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
sprintf-js@1.1.3
no fix listed
1
appwrite/new:1.1.159-self-hosted1811ce1d8154
sprintf-js@1.0.3
no fix listed
1
arbuzov/claude-code-api:0.1.02d7dd8070610
sprintf-js@1.1.3
no fix listed
1
arfath29/3-tier-app-frontend:latest384b3e377f47
sprintf-js@1.0.3
no fix listed
1
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
sprintf-js@1.0.3
no fix listed
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
sprintf-js@1.0.3
no fix listed
1
assistiot/fl_orchestrator:api-latest7473d77448e1
sprintf-js@1.0.3
no fix listed
1
assistiot/open_api_frontend:1.0.1f11d82defc70
sprintf-js@1.0.3
no fix listed
1
automatischio/automatisch:0.15.03bace7a12d5f
sprintf-js@1.0.3
no fix listed
1
baserow/baserow:1.30.1df0c42eb67e8
sprintf-js@1.0.3
no fix listed
1
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
sprintf-js@1.1.2
no fix listed
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
sprintf-js@1.1.3
no fix listed
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
sprintf-js@1.0.3
no fix listed
1
bluerange/bluerange-mosquitto:2690a4e5b92cc6
sprintf-js@1.0.3
no fix listed
1
bnjbvr/kresus:0.22.137e216b182c8
sprintf-js@1.1.3
no fix listed
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
sprintf-js@1.0.3
no fix listed
1
budibase/apps:3.41.344fe6feab985
sprintf-js@1.0.3
no fix listed
1
budibase/worker:3.41.3de5e2e560ce8
sprintf-js@1.1.3
no fix listed
1
camptocamp/geomapfishapp-geoportal:latestae874f70cc16
node-sprintf-js@1.1.2+ds1+~1.1.2-1
sprintf-js@1.1.3
no fix listed
no fix listed
1
carbonetes/carbonetes-analyzer:1.0.31b9b93c9a37f
sprintf-js@1.0.3
no fix listed
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.