StackRadar

GHSA-36jr-mh4h-2g58

High

Advisory

Published 29 Sept 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
33
of 17,781 indexed, latest versions
Container images
30
deployed by those charts
Fix available
1 of 1
affected package

d3-color vulnerable to ReDoS

Carried by container images the latest versions of 33 of 17,781 indexed charts deploy, on 30 images.

Affected packageAffected versionsFixed inImages
d3-colornpm1.0.3, 1.2.3, 1.4.1, 2.0.0+1 more3.1.030
OSV records
GHSA-36jr-mh4h-2g58

Charts affected

33 by stars
ChartLatestAffected imagesRadar Score
umamiwaldo-visionVerified publisher0.0.11 of 1See more

umami waldo-vision 0.0.1

1 of the 1 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:postgresql-v1.39.560fa8875aff8
d3-color@2.0.0
3.1.0

Open the chart page →

1,255
nightscoutgabe565Verified publisher0.13.01 of 2See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
d3-color@1.4.1
3.1.0

Open the chart page →

2,521
zwavejs2mqttgeek-cookbookVerified publisher5.4.21 of 1See more

zwavejs2mqtt geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
d3-color@2.0.0
3.1.0

Open the chart page →

3,476
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
d3-color@1.4.1
3.1.0

Open the chart page →

6,868
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
d3-color@1.4.1
3.1.0

Open the chart page →

10,730
joplin-serverdjjudas21Verified publisher5.5.81 of 1See more

joplin-server djjudas21 5.5.8

1 of the 1 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
joplin/server:2.14.2-betab87564ef34e9
d3-color@3.0.1
3.1.0

Open the chart page →

3,925
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
d3-color@3.0.1
3.1.0

Open the chart page →

7,801
growthbookgrowthbook5.0.11 of 2See more

growthbook growthbook 5.0.1

1 of the 2 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
growthbook/growthbook:5.0.1f53ead646b5f
d3-color@1.4.1
3.1.0

Open the chart page →

709
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
library/kibana:7.17.3e2e2031c15be
d3-color@1.4.1
3.1.0

Open the chart page →

17,284
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
d3-color@1.4.1
3.1.0

Open the chart page →

6,879
trifidappuio2.0.21 of 1See more

trifid appuio 2.0.2

1 of the 1 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
zazuko/trifid:2.3.7054be137de70
d3-color@1.0.3
3.1.0

Open the chart page →

2,783
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
d3-color@1.4.1
3.1.0

Open the chart page →

5,806
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
d3-color@1.2.3
3.1.0

Open the chart page →

29,901
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
coldatom/containers-security-front:latest7c2fbbb41bcf
d3-color@2.0.0
3.1.0

Open the chart page →

9,146
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
d3-color@2.0.0
3.1.0

Open the chart page →

4,650
rtlgaloymoney0.4.31 of 2See more

rtl galoymoney 0.4.3

1 of the 2 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
d3-color@2.0.0
3.1.0

Open the chart page →

2,090
rtlgaloymoney20.4.31 of 2See more

rtl galoymoney2 0.4.3

1 of the 2 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
d3-color@2.0.0
3.1.0

Open the chart page →

2,090
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
d3-color@1.4.1
3.1.0

Open the chart page →

4,043
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
library/kibana:7.17.150172f1c538e7
d3-color@1.4.1
3.1.0

Open the chart page →

34,754
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
d3-color@2.0.0
3.1.0

Open the chart page →

7,232
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
d3-color@1.4.1
3.1.0

Open the chart page →

6,454
rtlkronkltdVerified publisher0.1.01 of 2See more

rtl kronkltd 0.1.0

1 of the 2 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.11.0d0cd3d868aca
d3-color@1.4.1
3.1.0

Open the chart page →

5,604
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
d3-color@1.4.1
3.1.0

Open the chart page →

2,685
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.4.05126e2e79a1f
d3-color@1.2.3
3.1.0

Open the chart page →

7,929
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:1.0.039695180364b
d3-color@1.4.1
3.1.0

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:1.0.039695180364b
d3-color@1.4.1
3.1.0

Open the chart page →

10,603
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
d3-color@1.4.1
3.1.0

Open the chart page →

6,608
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
d3-color@1.4.1
3.1.0

Open the chart page →

27,465
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
d3-color@2.0.0
3.1.0

Open the chart page →

6,524
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
d3-color@3.0.1
3.1.0

Open the chart page →

7,413
wekanschmitzis1.1.11 of 1See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
quay.io/wekan/wekan:v5.65cb17600883a3
d3-color@3.0.1
3.1.0

Open the chart page →

3,638
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
d3-color@2.0.0
3.1.0

Open the chart page →

2,789
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry GHSA-36jr-mh4h-2g58.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
d3-color@1.4.1
3.1.0

Open the chart page →

5,806

Container images carrying it

30 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
d3-color@1.4.1
3.1.0
2
opensearchproject/opensearch-dashboards:1.0.039695180364b
d3-color@1.4.1
3.1.0
2
shahanafarooqui/rtl:0.13.3e2195188a451
d3-color@2.0.0
3.1.0
2
amazon/opendistro-for-elasticsearch-kibana:1.4.05126e2e79a1f
d3-color@1.2.3
3.1.0
1
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
d3-color@1.4.1
3.1.0
1
coldatom/containers-security-front:latest7c2fbbb41bcf
d3-color@2.0.0
3.1.0
1
daskdev/dask-notebook:1.1.0052630f5ca04
d3-color@1.2.3
3.1.0
1
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
d3-color@1.4.1
3.1.0
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
d3-color@2.0.0
3.1.0
1
growthbook/growthbook:5.0.1f53ead646b5f
d3-color@1.4.1
3.1.0
1
jayfong/yapi:1.10.2163e5d621910
d3-color@1.4.1
3.1.0
1
joplin/server:3.0-beta52af57880c0e
d3-color@3.0.1
3.1.0
1
joplin/server:2.14.2-betab87564ef34e9
d3-color@3.0.1
3.1.0
1
kyso/kyso-front:lateste52595c5c16f
d3-color@1.4.1
3.1.0
1
library/kibana:7.17.150172f1c538e7
d3-color@1.4.1
3.1.0
1
library/kibana:7.17.8c5781ba340ef
d3-color@1.4.1
3.1.0
1
library/kibana:7.17.3e2e2031c15be
d3-color@1.4.1
3.1.0
1
linuxserver/codimd:latestb801bbcf6386
d3-color@1.4.1
3.1.0
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
d3-color@1.4.1
3.1.0
1
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
d3-color@1.4.1
3.1.0
1
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
d3-color@1.4.1
3.1.0
1
phntom/codimd:2.4.31b9aafbb62e6
d3-color@2.0.0
3.1.0
1
roadiehq/community-backstage-image:latestef355bf5b639
d3-color@2.0.0
3.1.0
1
shahanafarooqui/rtl:0.11.0d0cd3d868aca
d3-color@1.4.1
3.1.0
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
d3-color@3.0.1
3.1.0
1
zazuko/trifid:2.3.7054be137de70
d3-color@1.0.3
3.1.0
1
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
d3-color@2.0.0
3.1.0
1
ghcr.io/ajnart/homarr:lateste103abadfb52
d3-color@2.0.0
3.1.0
1
ghcr.io/umami-software/umami:postgresql-v1.39.560fa8875aff8
d3-color@2.0.0
3.1.0
1
quay.io/wekan/wekan:v5.65cb17600883a3
d3-color@3.0.1
3.1.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.