StackRadar

GHSA-3f6p-5ww8-9rcr

High

Advisory

Published 1 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
91
of 17,781 indexed, latest versions
Container images
79
deployed by those charts
Fix available
1 of 1
affected package

MySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentials

Carried by container images the latest versions of 91 of 17,781 indexed charts deploy, on 79 images.

Affected packageAffected versionsFixed inImages
mysql2npm2.0.1, 2.1.0, 2.2.5, 2.3.0+25 more3.22.079
OSV records
GHSA-3f6p-5ww8-9rcr

Charts affected

91 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
mysql2@3.11.5
3.22.0

Open the chart page →

30,159
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
budibase/apps:3.41.344fe6feab985
mysql2@3.9.8
3.22.0

Open the chart page →

10,775
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
mysql2@3.9.2
3.22.0

Open the chart page →

5,639
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
mysql2@3.15.3
3.22.0

Open the chart page →

30,326
lighthouse-cicowboysysopVerified publisher9.0.01 of 1See more

lighthouse-ci cowboysysop 9.0.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
patrickhulce/lhci-server:0.8.174b4b6a3954d
mysql2@2.3.0
3.22.0

Open the chart page →

2,213
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
mysql2@3.18.2
3.22.0

Open the chart page →

1,339
kuttchristianhuthVerified publisher9.10.11 of 3See more

kutt christianhuth 9.10.1

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
kutt/kutt:v3.2.6fa3d24a89b04
mysql2@3.12.0
3.22.0

Open the chart page →

454
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
mysql2@2.2.5
3.22.0

Open the chart page →

5,946
umamihelmforgeVerified publisher2.3.31 of 3See more

umami helmforge 2.3.3

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.3.1fa32d116cf20
mysql2@3.15.3
3.22.0

Open the chart page →

2,027
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
mysql2@3.10.0
3.22.0

Open the chart page →

7,450
kubeviouskubevious1.2.24 of 7See more

kubevious kubevious 1.2.2

4 of the 7 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
kubevious/backend:1.2.22d9ba6eb46b6
mysql2@3.5.0
3.22.0
kubevious/collector:1.2.1f58226f9d84e
mysql2@3.5.0
3.22.0
kubevious/guard:1.2.19bf567704de2
mysql2@2.3.3
3.22.0
kubevious/parser:1.2.299ae7a5168c2
mysql2@3.5.0
3.22.0

Open the chart page →

14,204
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
mysql2@2.3.3
3.22.0

Open the chart page →

7,776
soketisoketi2.0.01 of 1See more

soketi soketi 2.0.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
quay.io/soketi/soketi:1.6-16-debian713223456cf1
mysql2@3.6.1
3.22.0

Open the chart page →

1,636
wgerwgerOfficialVerified publisher1.0.01 of 8See more

wger wger 1.0.0

1 of the 8 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
journeyapps/powersync-service:latestbf46f66e5dcc
mysql2@3.11.3
3.22.0

Open the chart page →

8,491
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
mysql2@3.20.0
3.22.0

Open the chart page →

4,016
predatorzooz1.7.01 of 1See more

predator zooz 1.7.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
zooz/predator:1.6f491d1f7a865
mysql2@2.2.5
3.22.0

Open the chart page →

2,851
directusdirectus-io2.1.01 of 3See more

directus directus-io 2.1.0

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
directus/directus:12.0.29c8470ea465c
mysql2@3.15.3
3.22.0

Open the chart page →

7,473
ghostfolioghostfolioVerified publisher0.5.41 of 3See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
mysql2@3.15.3
3.22.0

Open the chart page →

3,123
growthbookgrowthbook5.0.11 of 2See more

growthbook growthbook 5.0.1

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
growthbook/growthbook:5.0.1f53ead646b5f
mysql2@3.11.3
3.22.0

Open the chart page →

709
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
mysql2@3.9.7
3.22.0

Open the chart page →

4,196
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
mysql2@3.12.0
3.22.0

Open the chart page →

5,228
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
mysql2@3.17.0
3.22.0

Open the chart page →

2,575
kuttone-acre-fundVerified publisher0.2.51 of 1See more

kutt one-acre-fund 0.2.5

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
kutt/kutt:latestfa3d24a89b04
mysql2@3.12.0
3.22.0

Open the chart page →

454
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
mysql2@3.11.5
3.22.0

Open the chart page →

6,883
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
mysql2@3.11.5
3.22.0

Open the chart page →

38,107
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
mysql2@3.16.0
3.22.0

Open the chart page →

3,833
adeptia-automate-mcpadeptia-automate-mcp1.0.01 of 2See more

adeptia-automate-mcp adeptia-automate-mcp 1.0.0

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
mysql2@3.18.2
3.22.0

Open the chart page →

3,600
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
mysql2@3.11.5
3.22.0

Open the chart page →

30,028
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
mysql2@2.3.3
3.22.0

Open the chart page →

4,455
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
mysql2@3.18.1
3.22.0

Open the chart page →

4,083
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
mysql2@2.3.3
3.22.0

Open the chart page →

3,769
cspconsolecspconsole1.3.111 of 5See more

cspconsole cspconsole 1.3.11

1 of the 5 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
cspconsole/report-processor:1.0.279a2d8840bfdf
mysql2@3.11.0
3.22.0

Open the chart page →

12,274
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.01 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
mysql2@2.2.5
3.22.0

Open the chart page →

27,550
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
mysql2@3.11.0
3.22.0

Open the chart page →

4,551
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
mysql2@3.9.6
3.22.0

Open the chart page →

4,217
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
mysql2@2.2.5
3.22.0

Open the chart page →

24,656
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
mysql2@3.11.5
3.22.0

Open the chart page →

30,159
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
mysql2@2.2.5
3.22.0

Open the chart page →

27,291
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
mysql2@2.2.5
3.22.0

Open the chart page →

27,256
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
arturisimo/server-urjc:v1.0d8dc4430531e
mysql2@2.3.3
3.22.0

Open the chart page →

27,096
keyrockfiware0.8.71 of 1See more

keyrock fiware 0.8.7

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
mysql2@2.3.3
3.22.0

Open the chart page →

3,159
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
mysql2@3.9.9
3.22.0

Open the chart page →

3,474
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
mysql2@3.9.1
3.22.0

Open the chart page →

9,019
hoppscotchhelmforgeVerified publisher1.1.111 of 2See more

hoppscotch helmforge 1.1.11

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2026.8.0d50725df661f
mysql2@3.15.3
3.22.0

Open the chart page →

2,046
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
mysql2@3.11.5
3.22.0

Open the chart page →

30,099
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
mysql2@2.2.5
3.22.0

Open the chart page →

4,253
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
infisical/infisical:latest02082bf13163
mysql2@3.9.8
3.22.0

Open the chart page →

3,014
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
mysql2@3.18.1
3.22.0

Open the chart page →

3,436
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
mysql2@3.11.0
3.22.0

Open the chart page →

5,826
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
mysql2@3.14.1
3.22.0

Open the chart page →

3,092

Container images carrying it

79 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
louislam/uptime-kuma:2.4.091e963bfda56
mysql2@3.11.5
3.22.0
1
louislam/uptime-kuma:1.23.1396510915e6be
mysql2@3.9.7
3.22.0
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
mysql2@3.11.5
3.22.0
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
mysql2@3.9.6
3.22.0
1
mozilla/sentencecollector:2.0.91da6ff5c4895
mysql2@2.1.0
3.22.0
1
n8nio/n8n:2.25.7761374d4eb84
mysql2@3.17.0
3.22.0
1
n8nio/n8n:1.86.08b39ed5a2de9
mysql2@3.11.0
3.22.0
1
n8nio/n8n:0.212.0a9195bc499a3
mysql2@2.3.3
3.22.0
1
n8nio/n8n:1.33.1dd171d45102a
mysql2@3.9.2
3.22.0
1
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
mysql2@3.15.3
3.22.0
1
nocodb/nocodb:0.258.06779a4ddedf2
mysql2@3.11.4
3.22.0
1
nocodb/nocodb:0.301.5d9516f0bf546
mysql2@3.20.0
3.22.0
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
mysql2@2.3.3
3.22.0
1
patrickhulce/lhci-server:0.8.174b4b6a3954d
mysql2@2.3.0
3.22.0
1
phntom/codimd:2.4.31b9aafbb62e6
mysql2@2.0.1
3.22.0
1
pvillaverde/radio_dixital:1.5.0326a793e509f
mysql2@3.9.8
3.22.0
1
requarks/wiki:canary-2.5.2438b5865a7386c
mysql2@2.2.5
3.22.0
1
slagattollas/server-practica:latest6dd8ead8e2b1
mysql2@2.2.5
3.22.0
1
sqlpad/sqlpad:6.7d3d2f430dffd
mysql2@2.2.5
3.22.0
1
zooz/predator:1.6f491d1f7a865
mysql2@2.2.5
3.22.0
1
ghcr.io/harish2k01/portfolio-tracker:0.1.056efa3085895
mysql2@3.15.3
3.22.0
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
mysql2@2.2.5
3.22.0
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
mysql2@2.3.3
3.22.0
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
mysql2@3.12.0
3.22.0
1
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
mysql2@3.15.3
3.22.0
1
ghcr.io/umami-software/umami:3.3.1fa32d116cf20
mysql2@3.15.3
3.22.0
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
mysql2@3.6.5
3.22.0
1
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
mysql2@3.18.2
3.22.0
1
quay.io/soketi/soketi:1.6-16-debian713223456cf1
mysql2@3.6.1
3.22.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.