StackRadar

GHSA-35jh-r3h4-6jhm

High

Advisory

Published 6 May 2021In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.213
97th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
472
of 17,787 indexed, latest versions
Container images
491
deployed by those charts
Fix available
3 of 3
affected packages

lodash vulnerable to Code Injection via `_.template` imports key names

Carried by container images the latest versions of 472 of 17,787 indexed charts deploy, on 491 images.

Affected packageAffected versionsFixed inImages
lodashnpm0.9.2, 1.0.2, 1.3.1, 2.4.1+13 more4.17.21, 4.18.0484
lodash-esnpm4.17.4, 4.17.15, 4.17.20, 4.17.21+2 more4.17.21, 4.18.0112
lodash.templatenpm2.4.1, 3.6.2, 4.5.0, 4.17.15+1 more4.18.044
OSV records
GHSA-35jh-r3h4-6jhmGHSA-r5fr-rjxr-66jc
Also known as
CVE-2021-23337, CVE-2026-4800

Charts affected

472 by stars
ChartLatestAffected imagesRadar Score
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
lodash@4.17.21
4.18.0

Open the chart page →

4,253
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
lodash@4.17.21
4.18.0

Open the chart page →

3,614
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
lodash@4.17.21
4.18.0

Open the chart page →

3,407
ibm-app-navigatoribm-charts1.0.12 of 5See more

ibm-app-navigator ibm-charts 1.0.1

2 of the 5 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ibmcom/app-nav-init:1.0.1240ff499eb5b
lodash@3.10.1
4.17.21
ibmcom/app-nav-ui:1.0.1e2a86997b36b
lodash@4.17.15
lodash@3.10.1
4.18.0
4.17.21

Open the chart page →

32,915
ibm-business-automation-insights-devibm-charts3.2.02 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

2 of the 6 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ibmcom/bai-admin-dev:19.0.202d882f2836e
lodash@4.17.10
4.17.21
ibmcom/bai-setup-dev:19.0.2b8e8df11072d
lodash@4.17.10
4.17.21

Open the chart page →

39,349
ibm-microclimateibm-charts0.1.03 of 8See more

ibm-microclimate ibm-charts 0.1.0

3 of the 8 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
lodash@4.17.5
4.17.21
ibmcom/microclimate-portal:latested5505e5c7ec
lodash@4.17.5
lodash.template@3.6.2
4.17.21
no fix listed
ibmcom/microclimate-theia:lateste17bdccc5030
lodash@3.10.1
4.17.21

Open the chart page →

57,669
ibm-voice-gateway-devibm-charts3.1.01 of 2See more

ibm-voice-gateway-dev ibm-charts 3.1.0

1 of the 2 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
lodash@4.17.15
4.17.21

Open the chart page →

4,505
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
lodash@4.17.21
4.18.0

Open the chart page →

11,812
indexer-chartindexer-application0.1.01 of 1See more

indexer-chart indexer-application 0.1.0

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ibarreche/cloud-indexer-ci:latestb7a08274e69f
lodash@4.17.21
4.18.0

Open the chart page →

3,289
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
lodash@4.17.21
lodash@4.17.20
lodash.template@4.5.0
4.18.0
4.17.21
no fix listed

Open the chart page →

4,944
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
lodash@4.17.15
4.17.21

Open the chart page →

10,494
interbtc-hydrainterlay0.1.152 of 4See more

interbtc-hydra interlay 0.1.15

2 of the 4 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
lodash@4.17.21
lodash.template@4.5.0
4.18.0
no fix listed
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
lodash@4.17.21
4.18.0

Open the chart page →

6,831
interlay-firesquidinterlay0.1.111 of 4See more

interlay-firesquid interlay 0.1.11

1 of the 4 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
lodash@4.17.21
4.18.0

Open the chart page →

4,667
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
lodash@4.17.21
lodash@4.17.15
lodash-es@4.17.15
4.18.0
4.17.21
4.17.21

Open the chart page →

7,232
keyoxide-webittrident-oss0.2.31 of 1See more

keyoxide-web ittrident-oss 0.2.3

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
keyoxide/keyoxide:stable96f27a71269d
lodash@4.17.21
4.18.0

Open the chart page →

2,363
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
lodash.template@4.5.0
no fix listed

Open the chart page →

3,436
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0

Open the chart page →

5,826
monocularjenkins-x0.6.41 of 4See more

monocular jenkins-x 0.6.4

1 of the 4 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
migmartri/prerender:latest486aacfd5aa9
lodash@4.17.4
4.17.21

Open the chart page →

4,614
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
lodash-es@4.17.21
lodash@4.17.15
lodash.template@4.5.0
4.18.0
4.17.21
no fix listed

Open the chart page →

6,454
image-storage-servicejtektVerified publisher0.4.31 of 4See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
lodash@4.17.21
4.18.0

Open the chart page →

22,589
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
lodash@4.17.21
4.18.0

Open the chart page →

63,461
docker-hub-rssjuniorjpdj0.1.311 of 1See more

docker-hub-rss juniorjpdj 0.1.31

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ghcr.io/theconnman/docker-hub-rss:0.6.238eba84b2be8
lodash@4.17.21
4.18.0

Open the chart page →

1,966
todo-appjunktext-via-aws1.2.101 of 1See more

todo-app junktext-via-aws 1.2.10

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.34d44adf5a4da2
lodash@4.17.21
4.18.0

Open the chart page →

1,579
actual-budgetk8s-chartsVerified publisher0.2.31 of 1See more

actual-budget k8s-charts 0.2.3

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
actualbudget/actual-server:25.3.158fecd9088b7
lodash@4.17.21
4.18.0

Open the chart page →

2,611
audiobookshelfk8s-home-lab-repo2.0.11 of 1See more

audiobookshelf k8s-home-lab-repo 2.0.1

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
lodash@4.17.21
4.18.0

Open the chart page →

2,350
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
lodash.template@4.5.0
no fix listed

Open the chart page →

3,092
shinobik8s-home-lab-repo2.1.11 of 1See more

shinobi k8s-home-lab-repo 2.1.1

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
shinobisystems/shinobi:latestc2f5ce2e1067
lodash@4.17.21
4.18.0

Open the chart page →

4,667
youtubedl-materialk8s-home-lab-repo5.1.11 of 1See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.3.22f943d584711
lodash@4.17.21
4.18.0

Open the chart page →

9,783
zwave-js-uik8sonlabVerified publisher0.7.121 of 1See more

zwave-js-ui k8sonlab 0.7.12

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
zwavejs/zwave-js-ui:11.22.314d018bb689e
lodash@4.17.23
4.18.0

Open the chart page →

973
kenerkener-chart0.0.71 of 1See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
lodash@4.17.21
4.18.0

Open the chart page →

5,228
statsdkeyporttech0.1.191 of 1See more

statsd keyporttech 0.1.19

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
statsd/statsd:v0.8.6dab129e74c25
lodash@4.17.15
4.17.21

Open the chart page →

4,185
skoonerkfirfer0.0.61 of 1See more

skooner kfirfer 0.0.6

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
lodash@4.17.21
4.18.0

Open the chart page →

1,341
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
lodash@4.17.21
4.18.0

Open the chart page →

1,290
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
lodash@4.17.21
4.18.0

Open the chart page →

9,098
rtlkronkltdVerified publisher0.1.01 of 2See more

rtl kronkltd 0.1.0

1 of the 2 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.11.0d0cd3d868aca
lodash@4.17.21
4.18.0

Open the chart page →

5,604
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
lodash@4.17.21
lodash@4.17.19
4.18.0
4.17.21

Open the chart page →

3,397
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0

Open the chart page →

4,230
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
lodash@4.17.21
4.18.0

Open the chart page →

3,441
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
lodash@4.17.21
4.18.0

Open the chart page →

5,410
component-storekubebb0.0.231 of 1See more

component-store kubebb 0.0.23

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
kubebb/component-store:latestfd8ecbd73213
lodash@4.17.21
4.18.0

Open the chart page →

2,178
u4a-componentkubebb0.2.101 of 8See more

u4a-component kubebb 0.2.10

1 of the 8 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
kubebb/bff-server:v0.2.0-202312040fbb732379bc
lodash@4.17.21
4.18.0

Open the chart page →

13,819
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
lodash@4.17.23
4.18.0

Open the chart page →

8,405
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
library/ghost:6.39.0-alpine77196da4b0df
lodash.template@4.5.0
no fix listed

Open the chart page →

2,756
seerrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

seerr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
lodash@4.17.23
lodash-es@4.17.23
4.18.0
4.18.0

Open the chart page →

2,548
umamikubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

umami kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
lodash@4.17.21
4.18.0

Open the chart page →

2,596
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
lodash@4.17.23
4.18.0

Open the chart page →

6,356
kube-mailkubernetes-replicator0.11.11 of 3See more

kube-mail kubernetes-replicator 0.11.1

1 of the 3 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-mail:latest04f1099241fc
lodash@4.17.21
4.18.0

Open the chart page →

2,509
kubevious-agentkubevious1.0.41 of 1See more

kubevious-agent kubevious 1.0.4

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
kubevious/parser:1.0.151acf1a1f0b47
lodash@4.17.21
4.18.0

Open the chart page →

1,927
workload-operatorkubevious0.0.31 of 1See more

workload-operator kubevious 0.0.3

1 of the 1 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
kubevious/workload-operator:1.0.20b0f4c507eb6
lodash@4.17.21
4.18.0

Open the chart page →

2,008
penpotkubitodevVerified publisher1.2.11 of 5See more

penpot kubitodev 1.2.1

1 of the 5 container images this version deploys carry GHSA-35jh-r3h4-6jhm.

Container imageDigestPackageFixed in
penpotapp/exporter:2.2.15c835ffd87ab
lodash@4.17.21
4.18.0

Open the chart page →

16,877

Container images carrying it

491 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/ajnart/homarr:lateste103abadfb52
lodash@4.17.21
4.18.0
1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
lodash@4.17.23
4.18.0
1
ghcr.io/aolde/lametric-nightscout-proxy:latest7d1951b6baf5
lodash@4.17.21
4.18.0
1
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
lodash@4.17.23
4.18.0
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
lodash@4.17.21
4.18.0
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
lodash-es@4.17.23
4.18.0
1
ghcr.io/bryopsida/patchwork:mainc01e018bced4
lodash@4.17.21
4.18.0
1
ghcr.io/bryopsida/syslog-portal:main3947bfd04f49
lodash@4.17.21
4.18.0
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
lodash@4.17.21
4.18.0
1
ghcr.io/calesthio/crucix:latest67c5244b6acf
lodash@4.17.23
4.18.0
1
ghcr.io/cross-seed/cross-seed:6.13.7a1fed512261f
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
lodash@4.17.15
lodash-es@4.17.15
lodash@4.17.15
lodash-es@4.17.15
4.18.0
4.18.0
4.17.21
4.17.21
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
lodash@4.17.15
lodash-es@4.17.15
lodash@4.17.15
lodash-es@4.17.15
4.18.0
4.18.0
4.17.21
4.17.21
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
lodash@4.17.13
lodash-es@4.17.15
lodash@4.17.13
lodash-es@4.17.15
4.18.0
4.18.0
4.17.21
4.17.21
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
lodash@4.17.15
lodash-es@4.17.15
lodash@4.17.15
lodash-es@4.17.15
4.18.0
4.18.0
4.17.21
4.17.21
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
lodash@4.17.21
4.18.0
1
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
lodash@4.17.21
4.18.0
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
lodash@4.17.21
lodash.template@4.5.0
lodash.template@4.5.0
4.18.0
4.18.0
no fix listed
1
ghcr.io/data-fair/metrics:0a8d40779eeae
lodash@4.17.21
lodash.template@4.5.0
lodash.template@4.5.0
4.18.0
4.18.0
no fix listed
1
ghcr.io/data-fair/notify:3c739b74dabb0
lodash@4.17.21
lodash.template@4.5.0
lodash.template@4.5.0
4.18.0
4.18.0
no fix listed
1
ghcr.io/data-fair/processings:15a9216989707
lodash@4.17.21
lodash.template@4.5.0
lodash.template@4.5.0
4.18.0
4.18.0
no fix listed
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
lodash@4.17.21
lodash.template@4.5.0
lodash.template@4.5.0
4.18.0
4.18.0
no fix listed
1
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
lodash@4.17.21
4.18.0
1
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
lodash@4.17.19
lodash@4.17.19
4.18.0
4.17.21
1
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
ghcr.io/flaresolverr/flaresolverr:v1.2.896f8c08c0c1b
lodash@4.17.21
4.18.0
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
lodash@4.17.21
4.18.0
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
lodash@4.17.23
4.18.0
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
lodash@4.17.21
4.18.0
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
lodash@4.17.21
4.18.0
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
lodash@4.17.21
4.18.0
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
lodash@4.17.23
4.18.0
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
lodash@4.17.21
4.18.0
1
ghcr.io/leoquote/mergeable:latest451706815103
lodash@4.17.20
lodash@4.17.20
4.18.0
4.17.21
1
ghcr.io/leprechaun/lgtv2mqtt:latestac2e11c41ffb
lodash@4.17.21
4.18.0
1
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
lodash@4.17.23
4.18.0
1
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
lodash@4.17.20
lodash.template@4.5.0
lodash@4.17.20
lodash.template@4.5.0
4.18.0
4.18.0
4.17.21
no fix listed
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
lodash@4.17.21
4.18.0
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
lodash@4.17.21
4.18.0
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
lodash@4.17.21
4.18.0
1
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
lodash@4.17.21
4.18.0
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
lodash@4.17.21
4.18.0
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
lodash@4.17.21
4.18.0
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
lodash@4.17.21
lodash-es@4.17.21
4.18.0
4.18.0
1
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
lodash@4.17.21
4.18.0
1
ghcr.io/mmontes11/iot-biot:v3.11.033f7976b26a8
lodash@4.17.21
4.18.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.