StackRadar

CVE-2026-97058

Medium

Advisory

Published 24 Sept 2026In the index since 25 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
574
of 18,026 indexed, latest versions
Container images
593
deployed by those charts
Fix available
None
affected packages

sprintf-js vulnerable to denial of service through unbounded precision specifiers

Carried by container images the latest versions of 574 of 18,026 indexed charts deploy, on 593 images.

Affected packageAffected versionsFixed inImages
sprintf-jsnpm1.0.3, 1.1.1, 1.1.2, 1.1.3no fix listed593
node-sprintf-jsdeb1.1.2+ds1+~1.1.2-1no fix listed2
OSV records
GHSA-hp3w-g68c-fv3cUBUNTU-CVE-2026-97058

Charts affected

574 by stars
ChartLatestAffected imagesRadar Score
growthbookgrowthbook5.1.01 of 2See more

growthbook growthbook 5.1.0

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
growthbook/growthbook:5.1.0c8a124f55dca
sprintf-js@1.1.3
no fix listed

Open the chart page →

926
uptime-kumahelmforgeVerified publisher1.5.151 of 1See more

uptime-kuma helmforge 1.5.15

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.5c74379ac4509
sprintf-js@1.1.3
no fix listed

Open the chart page →

34,014
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
sprintf-js@1.1.3
no fix listed

Open the chart page →

5,249
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
sprintf-js@1.1.3
no fix listed

Open the chart page →

18,204
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
library/kibana:7.17.3e2e2031c15be
sprintf-js@1.0.3
no fix listed

Open the chart page →

18,226
todo-appjunktext-direct1.1.41 of 1See more

todo-app junktext-direct 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.5a70936c04aed
sprintf-js@1.0.3
no fix listed

Open the chart page →

4,181
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
sprintf-js@1.1.3
no fix listed

Open the chart page →

6,173
dashykrzwiatrzyk1.0.01 of 1See more

dashy krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
sprintf-js@1.0.3
no fix listed

Open the chart page →

3,377
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
langgenius/dify-web:0.6.11a2a294743634
sprintf-js@1.1.3
no fix listed

Open the chart page →

22,462
chibisafel4gVerified publisher0.1.12 of 3See more

chibisafe l4g 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
chibisafe/chibisafe:latest836467a50792
sprintf-js@1.1.3
no fix listed
chibisafe/chibisafe-server:latest3da4fcbc1a18
sprintf-js@1.1.3
no fix listed

Open the chart page →

5,701
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
sprintf-js@1.1.3
no fix listed

Open the chart page →

4,813
litlyxlitlyx0.2.03 of 5See more

litlyx litlyx 0.2.0

3 of the 5 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
litlyx/litlyx-consumer:latest02225e77d316
sprintf-js@1.1.3
no fix listed
litlyx/litlyx-dashboard:lateste64ff2d52385
sprintf-js@1.1.3
no fix listed
litlyx/litlyx-producer:latest10407f36613f
sprintf-js@1.1.3
no fix listed

Open the chart page →

9,613
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
sprintf-js@1.0.3
no fix listed

Open the chart page →

6,120
mend-renovate-enterprise-editionmend-renovateVerified publisher10.6.01 of 2See more

mend-renovate-enterprise-edition mend-renovate 10.6.0

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/mend/renovate-ee-server:15.6.087b77989f48d
sprintf-js@1.1.3
no fix listed

Open the chart page →

37,524
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
sprintf-js@1.1.3
no fix listed

Open the chart page →

15,429
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
sprintf-js@1.0.3
no fix listed

Open the chart page →

3,835
pixapopnicholaswildeVerified publisher1.0.01 of 1See more

pixapop nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/pixapop:v1.2-ls15605ebc091fa1
sprintf-js@1.1.2
no fix listed

Open the chart page →

3,599
oadaoadaVerified publisher5.0.610 of 11See more

oada oada 5.0.6

10 of the 11 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
oada/auth:4.0.0c0d077e79ef4
sprintf-js@1.1.3
no fix listed
oada/http-handler:4.0.0d87efe8ba4b0
sprintf-js@1.1.3
no fix listed
oada/rev-graph-update:4.0.0ebc8343f05ff
sprintf-js@1.1.3
no fix listed
oada/shares:4.0.0c6ffb4e8ed63
sprintf-js@1.1.3
no fix listed
oada/startup:4.0.0fc09495e2f3c
sprintf-js@1.1.3
no fix listed
oada/sync-handler:4.0.0b7a2cfc137cf
sprintf-js@1.1.3
no fix listed
oada/users:4.0.0b6c562fa5b1b
sprintf-js@1.1.3
no fix listed
oada/webhooks:4.0.06590c60de347
sprintf-js@1.1.3
no fix listed
oada/well-known:4.0.07943fde43b19
sprintf-js@1.1.3
no fix listed
oada/write-handler:4.0.08464c7f48aae
sprintf-js@1.1.3
no fix listed

Open the chart page →

15,302
dashdotoben01Verified publisher1.5.01 of 1See more

dashdot oben01 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
mauricenino/dashdot:5.9.2236997816917
sprintf-js@1.1.3
no fix listed

Open the chart page →

1,675
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
growthbook/growthbook:latest67b7cd7d12a1
sprintf-js@1.1.3
no fix listed

Open the chart page →

1,550
openvaultopenvaultVerified publisher0.9.01 of 2See more

openvault openvault 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
sprintf-js@1.1.3
no fix listed

Open the chart page →

7,957
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
sprintf-js@1.1.3
no fix listed

Open the chart page →

8,241
patchworkpatchworkVerified publisher0.8.61 of 2See more

patchwork patchwork 0.8.6

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/patchwork:mainc01e018bced4
sprintf-js@1.1.3
no fix listed

Open the chart page →

2,295
pdf-editor-helmpdf-editor-web1.0.01 of 4See more

pdf-editor-helm pdf-editor-web 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
sprintf-js@1.0.3
no fix listed

Open the chart page →

5,426
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
sprintf-js@1.1.3
no fix listed

Open the chart page →

8,388
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
sprintf-js@1.0.3
no fix listed

Open the chart page →

36,111
psa-restricted-patcherpsa-restricted-patcherVerified publisher0.10.11 of 1See more

psa-restricted-patcher psa-restricted-patcher 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/psa-restricted-patcher:maina53ef16b024a
sprintf-js@1.1.3
no fix listed

Open the chart page →

1,637
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
sprintf-js@1.0.3
no fix listed

Open the chart page →

6,430
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
sprintf-js@1.0.3
no fix listed

Open the chart page →

7,375
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
sprintf-js@1.0.3
no fix listed

Open the chart page →

3,389
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
sprintf-js@1.1.3
no fix listed

Open the chart page →

33,120
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
sprintf-js@1.1.3
no fix listed

Open the chart page →

42,559
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
sprintf-js@1.1.3
no fix listed

Open the chart page →

6,068
speckle-serverspeckleVerified publisher2.26.32 of 4See more

speckle-server speckle 2.26.3

2 of the 4 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
sprintf-js@1.1.3
no fix listed
speckle/speckle-server:2.26.379f14a2bf931
sprintf-js@1.1.3
no fix listed

Open the chart page →

11,845
statsdstatsd-airflow-smd0.1.191 of 1See more

statsd statsd-airflow-smd 0.1.19

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
statsd/statsd:v0.8.6dab129e74c25
sprintf-js@1.0.3
no fix listed

Open the chart page →

5,503
stornxstornxVerified publisher1.1.11 of 9See more

stornx stornx 1.1.1

1 of the 9 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
alazidis/stornx:1.1.1602d4f7f090c
sprintf-js@1.1.3
no fix listed

Open the chart page →

14,649
supabasesupabse0.8.01 of 11See more

supabase supabse 0.8.0

1 of the 11 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
supabase/postgres-meta:v0.96.6a84cc713585e
sprintf-js@1.1.3
no fix listed

Open the chart page →

21,495
tenuretenureVerified publisher1.0.61 of 2See more

tenure tenure 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
tenureai/tenure:v1.0.285f5b222df9a5
sprintf-js@1.0.3
no fix listed

Open the chart page →

3,223
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
sprintf-js@1.0.3
no fix listed

Open the chart page →

8,751
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
sprintf-js@1.1.3
no fix listed

Open the chart page →

16,602
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
sprintf-js@1.0.3
no fix listed

Open the chart page →

13,666
vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets0.0.0-main1 of 2See more

vaultwarden-kubernetes-secrets vaultwarden-kubernetes-secrets 0.0.0-main

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
sprintf-js@1.1.3
no fix listed

Open the chart page →

4,531
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
sprintf-js@1.1.3
no fix listed

Open the chart page →

5,975
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
requarks/wiki:latestfffff288a52f
sprintf-js@1.0.3
no fix listed

Open the chart page →

2,599
scrapoxywiremindVerified publisher0.3.41 of 1See more

scrapoxy wiremind 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
wiremind/scrapoxy:lateste7048929a676
sprintf-js@1.0.3
no fix listed

Open the chart page →

2,288
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
sprintf-js@1.1.3
no fix listed

Open the chart page →

5,812
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
sprintf-js@1.1.2
no fix listed

Open the chart page →

10,814
qleverzazukoVerified publisher0.7.21 of 2See more

qlever zazuko 0.7.2

1 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/zazukoians/qlever-ui:v0.10.3c27e20f7a2ca
sprintf-js@1.1.3
no fix listed

Open the chart page →

2,645
trifidzazukoOfficialVerified publisher0.2.11 of 1See more

trifid zazuko 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
ghcr.io/zazuko/trifid:v6.0.159bda2bf65d4
sprintf-js@1.0.3
no fix listed

Open the chart page →

614
adeptia-automate-mcpadeptia-automate-mcp1.0.02 of 2See more

adeptia-automate-mcp adeptia-automate-mcp 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-97058.

Container imageDigestPackageFixed in
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
sprintf-js@1.1.3
no fix listed
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
sprintf-js@1.1.3
no fix listed

Open the chart page →

4,283

Container images carrying it

593 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
sharanalwar/redchef-frontend:latest5e82950b16b7
sprintf-js@1.1.3
no fix listed
1
shinobisystems/shinobi:dev3ca746937856
sprintf-js@1.0.3
no fix listed
1
shinobisystems/shinobi:latestc2f5ce2e1067
sprintf-js@1.0.3
no fix listed
1
shyamkrishna21/cloudvault:latestaf2785f5bb71
sprintf-js@1.1.3
no fix listed
1
shyamkrishna21/shopsync:latest3998b83def53
sprintf-js@1.1.3
no fix listed
1
sigp/siren:v3.0.42c219b04758e
sprintf-js@1.1.3
no fix listed
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
sprintf-js@1.0.3
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
sprintf-js@1.1.3
no fix listed
1
skylenet/ethstats-server:pow-latestd757cc016198
sprintf-js@1.0.3
no fix listed
1
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
sprintf-js@1.0.3
no fix listed
1
solidproject/community-server:6.0.2ccc4acb7e9a1
sprintf-js@1.0.3
no fix listed
1
soulteary/cronicle:0.9.80ac2512fa6e39
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-preview-service:2.26.3092384dba45d
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.26.379f14a2bf931
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
sprintf-js@1.1.3
no fix listed
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
sprintf-js@1.1.3
no fix listed
1
sqlpad/sqlpad:6.7d3d2f430dffd
sprintf-js@1.1.2
no fix listed
1
stanfordoval/almond-server:latest1a63cdccedaf
sprintf-js@1.0.3
no fix listed
1
supabase/postgres-meta:v0.96.6a84cc713585e
sprintf-js@1.1.3
no fix listed
1
supabase/postgres-meta:v0.84.2d0a96973e9f1
sprintf-js@1.1.3
no fix listed
1
supabase/storage-api:v1.12.0f983fb50bd95
sprintf-js@1.1.3
no fix listed
1
supabase/studio:20241021-9f9b08326d8070c55e9
sprintf-js@1.1.3
no fix listed
1
supporttools/uptime-kuma:v2.6f8a49ed65809
sprintf-js@1.1.3
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
sprintf-js@1.0.3
no fix listed
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
sprintf-js@1.0.3
no fix listed
1
tenureai/tenure:v1.0.285f5b222df9a5
sprintf-js@1.0.3
no fix listed
1
testhubio/testhub-frontend:on-preme86c2db53be8
sprintf-js@1.0.3
no fix listed
1
th0th/node-red:4.0.3-debiand06fa39f7406
sprintf-js@1.1.3
no fix listed
1
thecloudspark/app-result:1.09a5302cb8312
sprintf-js@1.1.3
no fix listed
1
thecodingmachine/workadventure-map-storage:helm-chart519c31c6e7ec
sprintf-js@1.0.3
no fix listed
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
sprintf-js@1.0.3
no fix listed
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
sprintf-js@1.1.2
no fix listed
1
treskon/portrait-ui:DEV-lateste7970783bc8d
sprintf-js@1.0.3
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
sprintf-js@1.1.3
no fix listed
1
unleashorg/unleash-enterprise:7.5.0245aeba40053
sprintf-js@1.1.3
no fix listed
1
unleashorg/unleash-proxy:v1.4.82538f89e2685
sprintf-js@1.1.3
no fix listed
1
unleashorg/unleash-server:7.5.09adb37e399ba
sprintf-js@1.1.3
no fix listed
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.