StackRadar

GHSA-3f6p-5ww8-9rcr

High

Advisory

Published 1 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
91
of 17,781 indexed, latest versions
Container images
79
deployed by those charts
Fix available
1 of 1
affected package

MySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentials

Carried by container images the latest versions of 91 of 17,781 indexed charts deploy, on 79 images.

Affected packageAffected versionsFixed inImages
mysql2npm2.0.1, 2.1.0, 2.2.5, 2.3.0+25 more3.22.079
OSV records
GHSA-3f6p-5ww8-9rcr

Charts affected

91 by stars
ChartLatestAffected imagesRadar Score
kenerkener-chart0.0.71 of 1See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
mysql2@3.12.0
3.22.0

Open the chart page →

5,228
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
mysql2@2.2.5
3.22.0

Open the chart page →

3,397
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
mysql2@2.3.3
3.22.0

Open the chart page →

4,230
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
library/ghost:6.39.0-alpine77196da4b0df
mysql2@3.14.1
3.22.0

Open the chart page →

2,756
portfolio-trackerkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

portfolio-tracker kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ghcr.io/harish2k01/portfolio-tracker:0.1.056efa3085895
mysql2@3.15.3
3.22.0

Open the chart page →

1,498
umamikubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

umami kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
mysql2@3.15.3
3.22.0

Open the chart page →

2,596
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
mysql2@3.11.5
3.22.0

Open the chart page →

6,356
kubevious-agentkubevious1.0.41 of 1See more

kubevious-agent kubevious 1.0.4

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
kubevious/parser:1.0.151acf1a1f0b47
mysql2@2.3.3
3.22.0

Open the chart page →

1,927
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
mysql2@3.11.5
3.22.0

Open the chart page →

33,242
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
mysql2@3.11.5
3.22.0

Open the chart page →

33,242
lynxpromptlynxpromptVerified publisher0.1.21 of 3See more

lynxprompt lynxprompt 0.1.2

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
drumsergio/lynxprompt:2.0.75c6afb6679301
mysql2@3.15.3
3.22.0

Open the chart page →

1,852
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
hugohg34/server:0.0.2503e5d8960ff
mysql2@2.3.3
3.22.0

Open the chart page →

29,588
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
mysql2@2.3.3
3.22.0

Open the chart page →

9,668
bofmojaloop5.1.61 of 1See more

bof mojaloop 5.1.6

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
mysql2@3.15.3
3.22.0

Open the chart page →

2,457
finance-portalmojaloop5.1.44 of 11See more

finance-portal mojaloop 5.1.4

4 of the 11 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
mojaloop/reporting:v12.1.0d480a62103d6
mysql2@3.14.2
3.22.0
mojaloop/reporting-aggregator-svc:v0.0.92635baf23298
mysql2@3.14.3
3.22.0
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
mysql2@3.14.2
3.22.0
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
mysql2@3.14.1
3.22.0

Open the chart page →

14,809
reporting-aggregator-svcmojaloop1.0.71 of 1See more

reporting-aggregator-svc mojaloop 1.0.7

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
mojaloop/reporting-aggregator-svc:v0.0.92635baf23298
mysql2@3.14.3
3.22.0

Open the chart page →

800
reporting-events-processor-svcmojaloop3.5.31 of 1See more

reporting-events-processor-svc mojaloop 3.5.3

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
mysql2@3.14.2
3.22.0

Open the chart page →

2,631
reporting-hub-bop-experience-api-svcmojaloop1.0.31 of 1See more

reporting-hub-bop-experience-api-svc mojaloop 1.0.3

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
mysql2@3.14.1
3.22.0

Open the chart page →

2,318
reporting-legacy-apimojaloop2.2.01 of 1See more

reporting-legacy-api mojaloop 2.2.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
mojaloop/reporting:v12.1.0d480a62103d6
mysql2@3.14.2
3.22.0

Open the chart page →

1,948
security-role-perm-operator-svcmojaloop3.0.01 of 1See more

security-role-perm-operator-svc mojaloop 3.0.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
mysql2@3.15.3
3.22.0

Open the chart page →

2,457
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
mysql2@2.1.0
3.22.0

Open the chart page →

6,684
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
mysql2@3.14.1
3.22.0

Open the chart page →

4,960
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
mysql2@3.11.5
3.22.0

Open the chart page →

30,028
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
mysql2@2.2.5
3.22.0

Open the chart page →

27,465
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
mysql2@3.11.4
3.22.0

Open the chart page →

4,219
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
mysql2@2.0.1
3.22.0

Open the chart page →

6,524
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
slagattollas/server-practica:latest6dd8ead8e2b1
mysql2@2.2.5
3.22.0

Open the chart page →

28,484
radio-dixitalpvillaverdeVerified publisher1.6.01 of 1See more

radio-dixital pvillaverde 1.6.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
pvillaverde/radio_dixital:1.5.0326a793e509f
mysql2@3.9.8
3.22.0

Open the chart page →

415
coolifyquench-coolifyVerified publisher0.0.171 of 4See more

coolify quench-coolify 0.0.17

1 of the 4 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/coolify-realtimedigest-pinnedf128e512c9c0
mysql2@3.9.8
3.22.0

Open the chart page →

433
coolify-realtimequench-coolify-realtimeVerified publisher0.0.71 of 1See more

coolify-realtime quench-coolify-realtime 0.0.7

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/coolify-realtimedigest-pinnedf128e512c9c0
mysql2@3.9.8
3.22.0

Open the chart page →

306
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
mysql2@3.6.5
3.22.0

Open the chart page →

6,282
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
mysql2@3.11.5
3.22.0

Open the chart page →

30,219
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
mysql2@2.3.3
3.22.0

Open the chart page →

4,744
hedgedocschmitzis0.1.121 of 1See more

hedgedoc schmitzis 0.1.12

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
mysql2@2.3.3
3.22.0

Open the chart page →

3,118
simple-db-app-chartsimple-db-app0.1.01 of 2See more

simple-db-app-chart simple-db-app 0.1.0

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
mysql2@2.3.3
3.22.0

Open the chart page →

1,925
simple-db-app-chart-with-dependencysimple-db-app0.1.01 of 3See more

simple-db-app-chart-with-dependency simple-db-app 0.1.0

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
mysql2@2.3.3
3.22.0

Open the chart page →

1,925
infisicalsinextraVerified publisher0.6.01 of 1See more

infisical sinextra 0.6.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
infisical/infisical:v0.165.602082bf13163
mysql2@3.9.8
3.22.0

Open the chart page →

3,014
csmmth-chartsVerified publisher0.1.01 of 3See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
catalysm/csmm:latestf003b35f54d9
mysql2@2.3.3
3.22.0

Open the chart page →

3,576
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
mysql2@3.12.0
3.22.0

Open the chart page →

5,228
hedgedocvista0.1.11 of 1See more

hedgedoc vista 0.1.1

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
mysql2@2.3.3
3.22.0

Open the chart page →

3,118
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
mysql2@3.16.0
3.22.0

Open the chart page →

5,459

Container images carrying it

79 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
louislam/uptime-kuma:2.4.091e963bfda56
mysql2@3.11.5
3.22.0
1
louislam/uptime-kuma:1.23.1396510915e6be
mysql2@3.9.7
3.22.0
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
mysql2@3.11.5
3.22.0
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
mysql2@3.9.6
3.22.0
1
mozilla/sentencecollector:2.0.91da6ff5c4895
mysql2@2.1.0
3.22.0
1
n8nio/n8n:2.25.7761374d4eb84
mysql2@3.17.0
3.22.0
1
n8nio/n8n:1.86.08b39ed5a2de9
mysql2@3.11.0
3.22.0
1
n8nio/n8n:0.212.0a9195bc499a3
mysql2@2.3.3
3.22.0
1
n8nio/n8n:1.33.1dd171d45102a
mysql2@3.9.2
3.22.0
1
netrisai/controller-web-service-backend:4.6.0-0086e865080e86c
mysql2@3.15.3
3.22.0
1
nocodb/nocodb:0.258.06779a4ddedf2
mysql2@3.11.4
3.22.0
1
nocodb/nocodb:0.301.5d9516f0bf546
mysql2@3.20.0
3.22.0
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
mysql2@2.3.3
3.22.0
1
patrickhulce/lhci-server:0.8.174b4b6a3954d
mysql2@2.3.0
3.22.0
1
phntom/codimd:2.4.31b9aafbb62e6
mysql2@2.0.1
3.22.0
1
pvillaverde/radio_dixital:1.5.0326a793e509f
mysql2@3.9.8
3.22.0
1
requarks/wiki:canary-2.5.2438b5865a7386c
mysql2@2.2.5
3.22.0
1
slagattollas/server-practica:latest6dd8ead8e2b1
mysql2@2.2.5
3.22.0
1
sqlpad/sqlpad:6.7d3d2f430dffd
mysql2@2.2.5
3.22.0
1
zooz/predator:1.6f491d1f7a865
mysql2@2.2.5
3.22.0
1
ghcr.io/harish2k01/portfolio-tracker:0.1.056efa3085895
mysql2@3.15.3
3.22.0
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
mysql2@2.2.5
3.22.0
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
mysql2@2.3.3
3.22.0
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
mysql2@3.12.0
3.22.0
1
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
mysql2@3.15.3
3.22.0
1
ghcr.io/umami-software/umami:3.3.1fa32d116cf20
mysql2@3.15.3
3.22.0
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
mysql2@3.6.5
3.22.0
1
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
mysql2@3.18.2
3.22.0
1
quay.io/soketi/soketi:1.6-16-debian713223456cf1
mysql2@3.6.1
3.22.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.