StackRadar

CVE-2026-97058

Medium

Advisory

Published 24 Sept 2026In the index since 25 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
574
of 18,026 indexed, latest versions
Container images
593
deployed by those charts
Fix available
None
affected packages

sprintf-js vulnerable to denial of service through unbounded precision specifiers

Carried by container images the latest versions of 574 of 18,026 indexed charts deploy, on 593 images.

Affected packageAffected versionsFixed inImages
sprintf-jsnpm1.0.3, 1.1.1, 1.1.2, 1.1.3no fix listed593
node-sprintf-jsdeb1.1.2+ds1+~1.1.2-1no fix listed2
OSV records
GHSA-hp3w-g68c-fv3cUBUNTU-CVE-2026-97058

Charts affected

574 by stars
ChartLatestAffected imagesRadar Score
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/tale/headplane:0.5.50dbc52cffc19
sprintf-js@1.1.3
no fix listed

Open the chart page →

9,745
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
sprintf-js@1.1.3
no fix listed

Open the chart page →

7,990
community-solid-servercommunity-solid-server3.0.01 of 1See more

community-solid-server community-solid-server 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
solidproject/community-server:6.0.2ccc4acb7e9a1
sprintf-js@1.0.3
no fix listed

Open the chart page →

1,819
foremancontane-githubOfficialVerified publisher0.6.01 of 1See more

foreman contane-github 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
contane/foreman:0.5.2efb98bdcc4e9
sprintf-js@1.1.3
no fix listed

Open the chart page →

1,612
convertigoconvertigoOfficialVerified publisher8.4.51 of 5See more

convertigo convertigo 8.4.5

1 of the 5 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
sprintf-js@1.0.3
no fix listed

Open the chart page →

17,283
cosmocosmo-platformOfficialVerified publisher0.20.03 of 10See more

cosmo cosmo-platform 0.20.0

3 of the 10 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/cdn:0.14.1d86fcf169f15
sprintf-js@1.1.3
no fix listed
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
sprintf-js@1.1.3
no fix listed
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
sprintf-js@1.1.3
no fix listed

Open the chart page →

34,276
hubotdecayofmind1.0.21 of 3See more

hubot decayofmind 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
decayofmind/hubot:3.3.21e18e92fe694
sprintf-js@1.1.2
no fix listed

Open the chart page →

2,703
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
sprintf-js@1.1.3
no fix listed

Open the chart page →

4,195
nightscoutgabe565Verified publisher0.13.01 of 2See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
sprintf-js@1.0.3
no fix listed

Open the chart page →

2,762
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
sprintf-js@1.0.3
no fix listed

Open the chart page →

9,161
kongakonga1.1.01 of 1See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
sprintf-js@1.0.3
no fix listed

Open the chart page →

5,345
kubeviouskubevious1.2.23 of 7See more

kubevious kubevious 1.2.2

3 of the 7 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
kubevious/collector:1.2.1f58226f9d84e
sprintf-js@1.0.3
no fix listed
kubevious/guard:1.2.19bf567704de2
sprintf-js@1.0.3
no fix listed
kubevious/parser:1.2.299ae7a5168c2
sprintf-js@1.0.3
no fix listed

Open the chart page →

17,557
activepiecesmeyerchartsVerified publisher0.1.61 of 1See more

activepieces meyercharts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
activepieces/activepieces:0.23.0c26188b44e62
sprintf-js@1.1.3
no fix listed

Open the chart page →

3,450
mstreamnicholaswildeVerified publisher2.1.21 of 1See more

mstream nicholaswilde 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/mstream:version-v5.2.522c012bcc43c
sprintf-js@1.0.3
no fix listed

Open the chart page →

5,643
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
sprintf-js@1.0.3
no fix listed

Open the chart page →

7,851
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
enketo/enketo-express:3.0.4dcad9c2273f6
sprintf-js@1.0.3
no fix listed
kobotoolbox/kpi:2.022.24dbcacc01bccd4
sprintf-js@1.0.3
no fix listed

Open the chart page →

23,691
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
sprintf-js@1.1.2
no fix listed

Open the chart page →

8,503
overseerrpree-helm-chartsVerified publisher1.2.01 of 1See more

overseerr pree-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.35.06197516c9d7b
sprintf-js@1.1.3
no fix listed

Open the chart page →

2,992
hedgedocrobertobochetVerified publisher1.4.01 of 1See more

hedgedoc robertobochet 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.12.089bd85d7817f
sprintf-js@1.0.3
no fix listed

Open the chart page →

1,450
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
sprintf-js@1.0.3
no fix listed

Open the chart page →

102,426
soketisoketi2.0.01 of 1See more

soketi soketi 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
quay.io/soketi/soketi:1.6-16-debian713223456cf1
sprintf-js@1.1.2
no fix listed

Open the chart page →

1,891
feedbacksystemthm-mni-iiVerified publisher0.48.12 of 14See more

feedbacksystem thm-mni-ii 0.48.1

2 of the 14 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/thm-mni-ii/fbs-qcm-backend:v2.0.6f1a7afffedab
sprintf-js@1.1.3
no fix listed
ghcr.io/thm-mni-ii/fbs-qcm-frontend:v2.0.6fc8ab4ce0654
sprintf-js@1.1.3
no fix listed

Open the chart page →

29,135
wgerwgerOfficialVerified publisher2.0.01 of 7See more

wger wger 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
journeyapps/powersync-service:latest413a0c813e96
sprintf-js@1.1.3
no fix listed

Open the chart page →

8,934
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
sprintf-js@1.1.3
no fix listed

Open the chart page →

5,210
predatorzooz1.7.01 of 1See more

predator zooz 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
zooz/predator:1.6f491d1f7a865
sprintf-js@1.1.2
no fix listed

Open the chart page →

3,168
dbgateappscodeVerified publisher2026.3.301 of 1See more

dbgate appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
dbgate/dbgate:7.2.0-alpine287077002446
sprintf-js@1.1.3
no fix listed

Open the chart page →

942
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
sprintf-js@1.0.3
no fix listed

Open the chart page →

20,196
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
sprintf-js@1.0.3
no fix listed

Open the chart page →

12,246
seerrbdclark-helm-chartsVerified publisher0.1.51 of 1See more

seerr bdclark-helm-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.4.1f4768de5f616
sprintf-js@1.1.3
no fix listed

Open the chart page →

2,452
pysequilabiodatageeks0.1.31 of 7See more

pysequila biodatageeks 0.1.3

1 of the 7 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
jupyterhub/configurable-http-proxy:4.2.1b328f93ad125
sprintf-js@1.0.3
no fix listed

Open the chart page →

87,922
opensearch-dashboardscaptnbpVerified publisher2.2.11 of 1See more

opensearch-dashboards captnbp 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.15.0b7c26c60bfaf
sprintf-js@1.1.2
no fix listed

Open the chart page →

2,045
maildevchristianhuthVerified publisher1.6.01 of 1See more

maildev christianhuth 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
maildev/maildev:2.2.1180ef51f65ee
sprintf-js@1.1.3
no fix listed

Open the chart page →

1,591
dawarichcogitriVerified publisher2.9.21 of 3See more

dawarich cogitri 2.9.2

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.2e58334ca5697
sprintf-js@1.1.2
no fix listed

Open the chart page →

6,974
data-fairdata354-helmVerified publisher1.1.26 of 12See more

data-fair data354-helm 1.1.2

6 of the 12 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
sprintf-js@1.1.3
no fix listed
ghcr.io/data-fair/metrics:0a8d40779eeae
sprintf-js@1.0.3
no fix listed
ghcr.io/data-fair/notify:3c739b74dabb0
sprintf-js@1.0.3
no fix listed
ghcr.io/data-fair/portals:18b621866ceb2
sprintf-js@1.0.3
no fix listed
ghcr.io/data-fair/processings:15a9216989707
sprintf-js@1.0.3
no fix listed
ghcr.io/data-fair/simple-directory:438a4f32fad82
sprintf-js@1.0.3
no fix listed

Open the chart page →

42,584
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
sprintf-js@1.0.3
no fix listed

Open the chart page →

5,735
matomodigitalist-open-cloud-matomo12.0.211 of 3See more

matomo digitalist-open-cloud-matomo 12.0.21

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
digitalist/matomo:5.12.0bc4aeeaea769
sprintf-js@1.1.3
no fix listed

Open the chart page →

3,495
directusdirectus-io2.1.01 of 3See more

directus directus-io 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
directus/directus:12.0.29c8470ea465c
sprintf-js@1.1.2
no fix listed

Open the chart page →

9,353
joplin-serverdjjudas21Verified publisher6.0.01 of 1See more

joplin-server djjudas21 6.0.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
joplin/server:3.7.23f7b852959aa
sprintf-js@1.1.3
no fix listed

Open the chart page →

2,964
domain-lockerdomain-locker0.3.11 of 2See more

domain-locker domain-locker 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
lissy93/domain-locker:latest58a903b2cdd9
sprintf-js@1.0.3
no fix listed

Open the chart page →

1,035
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
sprintf-js@1.1.3
no fix listed

Open the chart page →

75,225
enbuildenbuildVerified publisher0.0.503 of 6See more

enbuild enbuild 0.0.50

3 of the 6 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
sprintf-js@1.0.3
no fix listed
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
sprintf-js@1.0.3
no fix listed
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
sprintf-js@1.0.3
no fix listed

Open the chart page →

35,965
ethereumjsethereum-helm-chartsVerified publisher0.1.21 of 2See more

ethereumjs ethereum-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ethpandaops/ethereumjs:masterfb84b718500f
sprintf-js@1.1.3
no fix listed

Open the chart page →

2,103
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
sprintf-js@1.1.3
no fix listed

Open the chart page →

13,128
ranetogabisonfire0.1.21 of 1See more

raneto gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
sprintf-js@1.1.2
no fix listed

Open the chart page →

2,660
magic-mirrorgeek-cookbookVerified publisher4.4.21 of 1See more

magic-mirror geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
sprintf-js@1.1.2
no fix listed

Open the chart page →

5,717
overseerrgeek-cookbookVerified publisher5.4.21 of 1See more

overseerr geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.26.1254d16af8f71
sprintf-js@1.1.2
no fix listed

Open the chart page →

3,650
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
sprintf-js@1.0.3
no fix listed

Open the chart page →

8,710
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
sprintf-js@1.1.2
no fix listed

Open the chart page →

6,582
zigbee2mqttgeek-cookbookVerified publisher9.4.21 of 1See more

zigbee2mqtt geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
sprintf-js@1.0.3
no fix listed

Open the chart page →

2,258
zwavejs2mqttgeek-cookbookVerified publisher5.4.21 of 1See more

zwavejs2mqtt geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
sprintf-js@1.0.3
no fix listed

Open the chart page →

3,623

Container images carrying it

593 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
sharanalwar/redchef-frontend:latest5e82950b16b7
sprintf-js@1.1.3
no fix listed
1
shinobisystems/shinobi:dev3ca746937856
sprintf-js@1.0.3
no fix listed
1
shinobisystems/shinobi:latestc2f5ce2e1067
sprintf-js@1.0.3
no fix listed
1
shyamkrishna21/cloudvault:latestaf2785f5bb71
sprintf-js@1.1.3
no fix listed
1
shyamkrishna21/shopsync:latest3998b83def53
sprintf-js@1.1.3
no fix listed
1
sigp/siren:v3.0.42c219b04758e
sprintf-js@1.1.3
no fix listed
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
sprintf-js@1.0.3
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
sprintf-js@1.1.3
no fix listed
1
skylenet/ethstats-server:pow-latestd757cc016198
sprintf-js@1.0.3
no fix listed
1
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
sprintf-js@1.0.3
no fix listed
1
solidproject/community-server:6.0.2ccc4acb7e9a1
sprintf-js@1.0.3
no fix listed
1
soulteary/cronicle:0.9.80ac2512fa6e39
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-preview-service:2.26.3092384dba45d
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.26.379f14a2bf931
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
sprintf-js@1.1.3
no fix listed
1
sqlpad/sqlpad:6.7d3d2f430dffd
sprintf-js@1.1.2
no fix listed
1
stanfordoval/almond-server:latest1a63cdccedaf
sprintf-js@1.0.3
no fix listed
1
supabase/postgres-meta:v0.96.6a84cc713585e
sprintf-js@1.1.3
no fix listed
1
supabase/postgres-meta:v0.84.2d0a96973e9f1
sprintf-js@1.1.3
no fix listed
1
supabase/storage-api:v1.12.0f983fb50bd95
sprintf-js@1.1.3
no fix listed
1
supabase/studio:20241021-9f9b08326d8070c55e9
sprintf-js@1.1.3
no fix listed
1
supporttools/uptime-kuma:v2.6f8a49ed65809
sprintf-js@1.1.3
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
sprintf-js@1.0.3
no fix listed
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
sprintf-js@1.0.3
no fix listed
1
tenureai/tenure:v1.0.285f5b222df9a5
sprintf-js@1.0.3
no fix listed
1
testhubio/testhub-frontend:on-preme86c2db53be8
sprintf-js@1.0.3
no fix listed
1
th0th/node-red:4.0.3-debiand06fa39f7406
sprintf-js@1.1.3
no fix listed
1
thecloudspark/app-result:1.09a5302cb8312
sprintf-js@1.1.3
no fix listed
1
thecodingmachine/workadventure-map-storage:helm-chart519c31c6e7ec
sprintf-js@1.0.3
no fix listed
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
sprintf-js@1.0.3
no fix listed
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
sprintf-js@1.1.2
no fix listed
1
treskon/portrait-ui:DEV-lateste7970783bc8d
sprintf-js@1.0.3
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
sprintf-js@1.1.3
no fix listed
1
unleashorg/unleash-enterprise:7.5.0245aeba40053
sprintf-js@1.1.3
no fix listed
1
unleashorg/unleash-proxy:v1.4.82538f89e2685
sprintf-js@1.1.3
no fix listed
1
unleashorg/unleash-server:7.5.09adb37e399ba
sprintf-js@1.1.3
no fix listed
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.