StackRadar

GHSA-3f6p-5ww8-9rcr

High

Advisory

Published 1 Sept 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
91
of 17,781 indexed, latest versions
Container images
79
deployed by those charts
Fix available
1 of 1
affected package

MySQL2: Auth Plugin Downgrade to mysql_clear_password Leaks Plaintext Credentials

Carried by container images the latest versions of 91 of 17,781 indexed charts deploy, on 79 images.

Affected packageAffected versionsFixed inImages
mysql2npm2.0.1, 2.1.0, 2.2.5, 2.3.0+25 more3.22.079
OSV records
GHSA-3f6p-5ww8-9rcr

Charts affected

91 by stars
ChartLatestAffected imagesRadar Score
kenerkener-chart0.0.71 of 1See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
mysql2@3.12.0
3.22.0

Open the chart page →

5,228
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
mysql2@2.2.5
3.22.0

Open the chart page →

3,397
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
mysql2@2.3.3
3.22.0

Open the chart page →

4,230
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
library/ghost:6.39.0-alpine77196da4b0df
mysql2@3.14.1
3.22.0

Open the chart page →

2,756
portfolio-trackerkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

portfolio-tracker kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ghcr.io/harish2k01/portfolio-tracker:0.1.056efa3085895
mysql2@3.15.3
3.22.0

Open the chart page →

1,498
umamikubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

umami kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
mysql2@3.15.3
3.22.0

Open the chart page →

2,596
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
mysql2@3.11.5
3.22.0

Open the chart page →

6,356
kubevious-agentkubevious1.0.41 of 1See more

kubevious-agent kubevious 1.0.4

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
kubevious/parser:1.0.151acf1a1f0b47
mysql2@2.3.3
3.22.0

Open the chart page →

1,927
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
mysql2@3.11.5
3.22.0

Open the chart page →

33,242
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
mysql2@3.11.5
3.22.0

Open the chart page →

33,242
lynxpromptlynxpromptVerified publisher0.1.21 of 3See more

lynxprompt lynxprompt 0.1.2

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
drumsergio/lynxprompt:2.0.75c6afb6679301
mysql2@3.15.3
3.22.0

Open the chart page →

1,852
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
hugohg34/server:0.0.2503e5d8960ff
mysql2@2.3.3
3.22.0

Open the chart page →

29,588
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
mysql2@2.3.3
3.22.0

Open the chart page →

9,668
bofmojaloop5.1.61 of 1See more

bof mojaloop 5.1.6

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
mysql2@3.15.3
3.22.0

Open the chart page →

2,457
finance-portalmojaloop5.1.44 of 11See more

finance-portal mojaloop 5.1.4

4 of the 11 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
mojaloop/reporting:v12.1.0d480a62103d6
mysql2@3.14.2
3.22.0
mojaloop/reporting-aggregator-svc:v0.0.92635baf23298
mysql2@3.14.3
3.22.0
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
mysql2@3.14.2
3.22.0
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
mysql2@3.14.1
3.22.0

Open the chart page →

14,809
reporting-aggregator-svcmojaloop1.0.71 of 1See more

reporting-aggregator-svc mojaloop 1.0.7

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
mojaloop/reporting-aggregator-svc:v0.0.92635baf23298
mysql2@3.14.3
3.22.0

Open the chart page →

800
reporting-events-processor-svcmojaloop3.5.31 of 1See more

reporting-events-processor-svc mojaloop 3.5.3

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
mysql2@3.14.2
3.22.0

Open the chart page →

2,631
reporting-hub-bop-experience-api-svcmojaloop1.0.31 of 1See more

reporting-hub-bop-experience-api-svc mojaloop 1.0.3

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
mysql2@3.14.1
3.22.0

Open the chart page →

2,318
reporting-legacy-apimojaloop2.2.01 of 1See more

reporting-legacy-api mojaloop 2.2.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
mojaloop/reporting:v12.1.0d480a62103d6
mysql2@3.14.2
3.22.0

Open the chart page →

1,948
security-role-perm-operator-svcmojaloop3.0.01 of 1See more

security-role-perm-operator-svc mojaloop 3.0.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
mysql2@3.15.3
3.22.0

Open the chart page →

2,457
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
mysql2@2.1.0
3.22.0

Open the chart page →

6,684
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
mysql2@3.14.1
3.22.0

Open the chart page →

4,960
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
mysql2@3.11.5
3.22.0

Open the chart page →

30,028
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
mysql2@2.2.5
3.22.0

Open the chart page →

27,465
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
mysql2@3.11.4
3.22.0

Open the chart page →

4,219
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
mysql2@2.0.1
3.22.0

Open the chart page →

6,524
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
slagattollas/server-practica:latest6dd8ead8e2b1
mysql2@2.2.5
3.22.0

Open the chart page →

28,484
radio-dixitalpvillaverdeVerified publisher1.6.01 of 1See more

radio-dixital pvillaverde 1.6.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
pvillaverde/radio_dixital:1.5.0326a793e509f
mysql2@3.9.8
3.22.0

Open the chart page →

415
coolifyquench-coolifyVerified publisher0.0.171 of 4See more

coolify quench-coolify 0.0.17

1 of the 4 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/coolify-realtimedigest-pinnedf128e512c9c0
mysql2@3.9.8
3.22.0

Open the chart page →

433
coolify-realtimequench-coolify-realtimeVerified publisher0.0.71 of 1See more

coolify-realtime quench-coolify-realtime 0.0.7

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/coolify-realtimedigest-pinnedf128e512c9c0
mysql2@3.9.8
3.22.0

Open the chart page →

306
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
mysql2@3.6.5
3.22.0

Open the chart page →

6,282
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
mysql2@3.11.5
3.22.0

Open the chart page →

30,219
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
mysql2@2.3.3
3.22.0

Open the chart page →

4,744
hedgedocschmitzis0.1.121 of 1See more

hedgedoc schmitzis 0.1.12

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
mysql2@2.3.3
3.22.0

Open the chart page →

3,118
simple-db-app-chartsimple-db-app0.1.01 of 2See more

simple-db-app-chart simple-db-app 0.1.0

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
mysql2@2.3.3
3.22.0

Open the chart page →

1,925
simple-db-app-chart-with-dependencysimple-db-app0.1.01 of 3See more

simple-db-app-chart-with-dependency simple-db-app 0.1.0

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
mysql2@2.3.3
3.22.0

Open the chart page →

1,925
infisicalsinextraVerified publisher0.6.01 of 1See more

infisical sinextra 0.6.0

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
infisical/infisical:v0.165.602082bf13163
mysql2@3.9.8
3.22.0

Open the chart page →

3,014
csmmth-chartsVerified publisher0.1.01 of 3See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
catalysm/csmm:latestf003b35f54d9
mysql2@2.3.3
3.22.0

Open the chart page →

3,576
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
mysql2@3.12.0
3.22.0

Open the chart page →

5,228
hedgedocvista0.1.11 of 1See more

hedgedoc vista 0.1.1

1 of the 1 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
mysql2@2.3.3
3.22.0

Open the chart page →

3,118
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry GHSA-3f6p-5ww8-9rcr.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
mysql2@3.16.0
3.22.0

Open the chart page →

5,459

Container images carrying it

79 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
oscarsotosanchez/server:v1.06e2e1279126b
mysql2@2.2.5
3.22.0
4
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
mysql2@2.3.3
3.22.0
2
infisical/infisical:latest:v0.165.602082bf13163
mysql2@3.9.8
3.22.0
2
kutt/kutt:latest:v3.2.6fa3d24a89b04
mysql2@3.12.0
3.22.0
2
louislam/uptime-kuma:2.5.4917318f9d7be
mysql2@3.11.5
3.22.0
2
louislam/uptime-kuma:2.3.29aeb4e51d038
mysql2@3.11.5
3.22.0
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
mysql2@3.11.5
3.22.0
2
mojaloop/reporting:v12.1.0d480a62103d6
mysql2@3.14.2
3.22.0
2
mojaloop/reporting-aggregator-svc:v0.0.92635baf23298
mysql2@3.14.3
3.22.0
2
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
mysql2@3.14.2
3.22.0
2
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
mysql2@3.14.1
3.22.0
2
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
mysql2@3.15.3
3.22.0
2
rajnandan1/kener:3.2.1930407afca731
mysql2@3.12.0
3.22.0
2
requarks/wiki:2:latest68f0d1848261
mysql2@3.16.0
3.22.0
2
ghcr.io/quenchworks/images/coolify-realtimef128e512c9c0
mysql2@3.9.8
3.22.0
2
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
mysql2@2.3.3
3.22.0
2
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
mysql2@3.18.2
3.22.0
1
arturisimo/server-urjc:v1.0d8dc4430531e
mysql2@2.3.3
3.22.0
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
mysql2@2.3.3
3.22.0
1
budibase/apps:3.41.344fe6feab985
mysql2@3.9.8
3.22.0
1
catalysm/csmm:latestf003b35f54d9
mysql2@2.3.3
3.22.0
1
codetogether/codetogether:latest4348c8a38752
mysql2@3.10.0
3.22.0
1
cryptexlabs/authf:0.12.11189c07411d7c
mysql2@2.3.3
3.22.0
1
cspconsole/report-processor:1.0.279a2d8840bfdf
mysql2@3.11.0
3.22.0
1
directus/directus:12.0.29c8470ea465c
mysql2@3.15.3
3.22.0
1
directus/directus:11.1.0e3c8bb975350
mysql2@3.11.0
3.22.0
1
drumsergio/lynxprompt:2.0.75c6afb6679301
mysql2@3.15.3
3.22.0
1
fiware/idm:8.3.3a1b6ed4ae84f
mysql2@2.3.3
3.22.0
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
mysql2@3.15.3
3.22.0
1
growthbook/growthbook:5.0.1f53ead646b5f
mysql2@3.11.3
3.22.0
1
hoppscotch/hoppscotch:2026.8.0d50725df661f
mysql2@3.15.3
3.22.0
1
hugohg34/server:0.0.2503e5d8960ff
mysql2@2.3.3
3.22.0
1
journeyapps/powersync-service:latestbf46f66e5dcc
mysql2@3.11.3
3.22.0
1
kubevious/backend:1.2.22d9ba6eb46b6
mysql2@3.5.0
3.22.0
1
kubevious/collector:1.2.1f58226f9d84e
mysql2@3.5.0
3.22.0
1
kubevious/guard:1.2.19bf567704de2
mysql2@2.3.3
3.22.0
1
kubevious/parser:1.0.151acf1a1f0b47
mysql2@2.3.3
3.22.0
1
kubevious/parser:1.2.299ae7a5168c2
mysql2@3.5.0
3.22.0
1
library/ghost:6.37.01ef2e532ca4d
mysql2@3.18.1
3.22.0
1
library/ghost:6.25.12654b1e90413
mysql2@3.14.1
3.22.0
1
library/ghost:6.41.129773d6be407
mysql2@3.14.1
3.22.0
1
library/ghost:6.39.0-alpine77196da4b0df
mysql2@3.14.1
3.22.0
1
library/ghost:5.79.083f7bf209844
mysql2@3.9.1
3.22.0
1
library/ghost:6.22.0-alpine3.23ac533a6988ee
mysql2@3.18.1
3.22.0
1
linuxserver/codimd:latestb801bbcf6386
mysql2@2.2.5
3.22.0
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
mysql2@3.11.5
3.22.0
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
mysql2@2.3.3
3.22.0
1
louislam/uptime-kuma:13d632903e6af
mysql2@3.9.9
3.22.0
1
louislam/uptime-kuma:2.5.33e24e96c89ef
mysql2@3.11.5
3.22.0
1
louislam/uptime-kuma:2.0.24c364ef96aad
mysql2@3.11.5
3.22.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.