StackRadar

GHSA-35jh-r3h4-6jhm

High

Advisory

Published 6 May 2021In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.213
97th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
476
of 17,787 indexed, latest versions
Container images
495
deployed by those charts
Fix available
3 of 3
affected packages

lodash vulnerable to Code Injection via `_.template` imports key names

Carried by container images the latest versions of 476 of 17,787 indexed charts deploy, on 495 images.

Affected packageAffected versionsFixed inImages
lodashnpm0.9.2, 1.0.2, 1.3.1, 2.4.1+13 more4.17.21, 4.18.0487
lodash-esnpm4.17.4, 4.17.15, 4.17.20, 4.17.21+2 more4.17.21, 4.18.0113
lodash.templatenpm2.4.1, 3.6.2, 4.5.0, 4.17.15+1 more4.18.046
OSV records
GHSA-35jh-r3h4-6jhmGHSA-r5fr-rjxr-66jc
Also known as
CVE-2021-23337, CVE-2026-4800

Charts affected

476 by stars
ChartLatestAffected imagesRadar Score
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
lodash@4.17.23
lodash-es@4.17.21
lodash.template@4.5.0
4.18.0
4.18.0
no fix listed

Open the chart page →

4,908
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
lodash@4.17.21
4.18.0

Open the chart page →

6,646
cloudcmdmy0nVerified publisher0.0.31 of 1See more

cloudcmd my0n 0.0.3

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
coderaiser/cloudcmd:16.6.1b34a9775c7ce
lodash@4.17.21
4.18.0

Open the chart page →

3,128
myawesomeappmyawesomapp-mitchxxx0.1.11 of 1See more

myawesomeapp myawesomapp-mitchxxx 0.1.1

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
mitchxxx/amazon:214e72480ec63a
lodash@4.17.21
4.18.0

Open the chart page →

2,116
myawesomeapp14myawesomeapp140.1.11 of 1See more

myawesomeapp14 myawesomeapp14 0.1.1

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ccjacobs14/amazon:59a9b14a6f09e
lodash@4.17.21
4.18.0

Open the chart page →

2,116
myawesomeapp-janmyawesomeapp-jan0.1.11 of 1See more

myawesomeapp-jan myawesomeapp-jan 0.1.1

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ooghenekaro/amazon:latest03394ba1d6d8
lodash@4.17.21
4.18.0

Open the chart page →

2,144
myawesomeapp-marmyawesomeapp-mar0.1.11 of 1See more

myawesomeapp-mar myawesomeapp-mar 0.1.1

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
winfred008/amazon:910a68de5b398
lodash@4.17.21
4.18.0

Open the chart page →

2,116
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
lodash@4.17.21
4.18.0

Open the chart page →

17,411
dashynas-helm-chartsVerified publisher1.0.41 of 1See more

dashy nas-helm-charts 1.0.4

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
lissy93/dashy:2.0.51991f7be5ed0
lodash@4.17.21
lodash.template@4.5.0
4.18.0
no fix listed

Open the chart page →

3,270
smilencsaVerified publisher1.1.02 of 23See more

smile ncsa 1.1.0

2 of the 23 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
socialmediamacroscope/smile_graphql:0.3.1c5095e94bc65
lodash@4.17.21
lodash@3.10.1
4.18.0
4.17.21
socialmediamacroscope/smile_server:0.3.31a528c794270
lodash@4.17.21
4.18.0

Open the chart page →

109,485
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
lodash@4.17.23
4.18.0

Open the chart page →

29,687
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
lodash@4.17.23
4.18.0

Open the chart page →

3,799
indexer-toolsnodeifyVerified publisher2.1.11 of 1See more

indexer-tools nodeify 2.1.1

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
lodash@4.17.21
4.18.0

Open the chart page →

2,919
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
lodash@4.17.21
4.18.0

Open the chart page →

13,331
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
lodash@4.17.21
4.18.0

Open the chart page →

13,405
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
lodash@4.17.21
4.18.0

Open the chart page →

13,387
example-dev-toolsnoygal0.2.82 of 3See more

example-dev-tools noygal 0.2.8

2 of the 3 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
lodash@1.3.1
4.17.21
linuxserver/codimd:latestb801bbcf6386
lodash@4.17.20
4.17.21

Open the chart page →

27,486
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
lodash@4.17.21
4.18.0

Open the chart page →

4,219
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
lodash@4.17.21
4.18.0

Open the chart page →

2,421
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
lodash@3.10.1
4.17.21

Open the chart page →

88,616
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
lodash@3.10.1
4.17.21

Open the chart page →

38,889
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0

Open the chart page →

9,968
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
openwhisk/alarmprovider:2.2.0b695a6ceb406
lodash@4.17.20
lodash@3.10.1
4.18.0
4.17.21

Open the chart page →

36,230
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
lodash@4.17.21
4.18.0

Open the chart page →

72,154
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
lodash@4.17.21
4.18.0

Open the chart page →

6,544
mishtip2p-avs0.1.01 of 2See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
mishtinetwork/operator:latestbb3fe67a5f7c
lodash@4.17.21
4.18.0

Open the chart page →

4,038
ungatep2p-avs0.1.01 of 3See more

ungate p2p-avs 0.1.0

1 of the 3 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
lodash@4.17.21
4.18.0

Open the chart page →

25,681
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
lodash@4.17.21
lodash-es@4.17.21
lodash.template@4.5.0
4.18.0
4.18.0
no fix listed

Open the chart page →

6,524
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
slagattollas/server-practica:latest6dd8ead8e2b1
lodash@4.17.21
4.18.0

Open the chart page →

28,495
kratos-selfservice-ui-noderadar-baseVerified publisher0.43.11 of 1See more

kratos-selfservice-ui-node radar-base 0.43.1

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
lodash@4.17.21
4.18.0

Open the chart page →

2,969
readability-js-serverreadability-js-server0.1.01 of 1See more

readability-js-server readability-js-server 0.1.0

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
phpdockerio/readability-js-server:1.8.0ea8354b42600
lodash@4.17.21
4.18.0

Open the chart page →

1,859
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
sharanalwar/redchef-frontend:latest5e82950b16b7
lodash@4.17.21
4.18.0

Open the chart page →

4,658
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
lodash@4.17.21
4.18.0

Open the chart page →

1,039
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
lodash@4.17.21
4.18.0

Open the chart page →

1,884
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
lodash@4.17.21
4.18.0

Open the chart page →

5,928
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
lodash@4.17.21
4.18.0

Open the chart page →

6,794
claude-relayrevolution10.1.371 of 4See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0

Open the chart page →

4,546
jsonplaceholderrgnu1.0.01 of 1See more

jsonplaceholder rgnu 1.0.0

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
svenwal/jsonplaceholder:latestba2f285af432
lodash@4.17.21
4.18.0

Open the chart page →

1,547
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
lodash@4.17.21
4.18.0

Open the chart page →

6,026
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
lodash@4.17.15
4.17.21

Open the chart page →

5,215
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
lodash@4.17.23
4.18.0

Open the chart page →

66,542
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
lodash@4.17.21
4.18.0

Open the chart page →

5,338
audiobookshelfrubxkubeVerified publisher0.1.31 of 1See more

audiobookshelf rubxkube 0.1.3

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
lodash@4.17.21
4.18.0

Open the chart page →

1,722
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0

Open the chart page →

7,429
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
lodash@4.17.23
4.18.0

Open the chart page →

29,870
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
lodash@4.17.21
4.18.0
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
lodash@4.17.21
4.18.0

Open the chart page →

17,736
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
lodash@4.17.21
4.18.0

Open the chart page →

14,792
samplesample0.1.01 of 2See more

sample sample 0.1.0

1 of the 2 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
library/mongo-express:1.0.2-20-alpine3.191aae00775251
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0

Open the chart page →

2,348
grocysarab97Verified publisher0.1.11 of 1See more

grocy sarab97 0.1.1

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
linuxserver/grocy:4.0.1f8f5f96b6ea8
lodash@4.17.21
4.18.0

Open the chart page →

2,448
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
lodash@4.17.21
4.18.0

Open the chart page →

4,744

Container images carrying it

495 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
lodash@4.17.21
4.18.0
1
ghcr.io/mmontes11/iot-biot:v3.11.033f7976b26a8
lodash@4.17.21
4.18.0
1
ghcr.io/mmontes11/iot-worker:v3.11.0491bb243f555
lodash@4.17.21
4.18.0
1
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
lodash@4.17.21
4.18.0
1
ghcr.io/open-telemetry/demo:1.12.0-paymentserviceb0f13eef3abf
lodash@4.17.21
4.18.0
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
lodash@4.17.21
4.18.0
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
lodash@4.17.21
4.18.0
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
lodash@4.17.21
4.18.0
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
lodash@4.17.21
lodash.template@4.5.0
lodash.template@4.5.0
4.18.0
4.18.0
no fix listed
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
lodash@4.17.21
lodash-es@4.17.20
lodash-es@4.17.20
4.18.0
4.18.0
4.17.21
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
lodash@4.17.21
4.18.0
1
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
lodash@4.17.23
lodash-es@4.17.23
4.18.0
4.18.0
1
ghcr.io/tale/headplane:0.5.50dbc52cffc19
lodash@4.17.21
4.18.0
1
ghcr.io/theconnman/docker-hub-rss:0.6.238eba84b2be8
lodash@4.17.21
4.18.0
1
ghcr.io/umami-software/umami:postgresql-v1.39.560fa8875aff8
lodash@4.17.21
4.18.0
1
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
lodash@4.17.21
4.18.0
1
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
lodash@4.17.21
4.18.0
1
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
lodash@4.17.20
lodash@4.17.20
4.18.0
4.17.21
1
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
ghcr.io/wekan/wekan:v11.79039ef2b811cf
lodash.template@4.5.0
lodash.template@4.5.0
4.18.0
no fix listed
1
ghcr.io/wgbh-mla/dream-aapb:main288a4774aa90
lodash@4.17.23
4.18.0
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
lodash@4.17.21
4.18.0
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
lodash@4.17.21
4.18.0
1
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
lodash@4.17.21
4.18.0
1
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
lodash@4.17.21
4.18.0
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
lodash@4.17.21
4.18.0
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
lodash@4.17.21
4.18.0
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
lodash@4.17.21
4.18.0
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
quay.io/helmpack/monocular-ui:v1.10.086b71e90319f
lodash@3.10.1
4.17.21
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
lodash@4.17.15
lodash.template@4.5.0
lodash@4.17.15
lodash.template@4.5.0
4.18.0
4.18.0
4.17.21
no fix listed
1
quay.io/mittwald/kube-mail:latest04f1099241fc
lodash@4.17.21
4.18.0
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
lodash@4.17.20
lodash.template@4.5.0
lodash@4.17.20
lodash.template@4.5.0
4.18.0
4.18.0
4.17.21
no fix listed
1
quay.io/soketi/k8soketi:0.1-18-debian4cd9ea9434c4
lodash@4.17.21
4.18.0
1
quay.io/soketi/pws:0.8-16-alpine399d2e6b10ef
lodash@4.17.21
4.18.0
1
quay.io/soketi/soketi:1.6-16-debian713223456cf1
lodash@4.17.21
4.18.0
1
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
lodash@4.17.15
lodash@4.17.15
4.18.0
4.17.21
1
quay.io/wekan/wekan:v5.65cb17600883a3
lodash@4.17.4
lodash@1.0.2
lodash.template@3.6.2
4.18.0
4.17.21
no fix listed
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
lodash@4.17.21
4.18.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
lodash@4.17.23
4.18.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
lodash@4.17.21
4.18.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
lodash@4.17.23
4.18.0
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
lodash@4.17.10
lodash-es@4.17.4
lodash@4.17.10
lodash-es@4.17.4
4.18.0
4.18.0
4.17.21
4.17.21
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.