StackRadar

GHSA-67mh-4wv8-2f99

Medium

Advisory

Published 10 Feb 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
55
of 17,781 indexed, latest versions
Container images
55
deployed by those charts
Fix available
1 of 1
affected package

esbuild enables any website to send any requests to the development server and read the response

Carried by container images the latest versions of 55 of 17,781 indexed charts deploy, on 55 images.

Affected packageAffected versionsFixed inImages
esbuildnpm0.11.23, 0.14.38, 0.15.18, 0.16.17+10 more0.25.055
OSV records
GHSA-67mh-4wv8-2f99

Charts affected

55 by stars
ChartLatestAffected imagesRadar Score
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry GHSA-67mh-4wv8-2f99.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
esbuild@0.18.20
0.25.0

Open the chart page →

5,228
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry GHSA-67mh-4wv8-2f99.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
esbuild@0.23.1
0.25.0

Open the chart page →

2,789
websitewaldo-visionVerified publisher0.33.01 of 2See more

website waldo-vision 0.33.0

1 of the 2 container images this version deploys carry GHSA-67mh-4wv8-2f99.

Container imageDigestPackageFixed in
ghcr.io/waldo-vision/migrate:v0.3.6ae31923312ed
esbuild@0.17.12
0.25.0

Open the chart page →

3,474
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry GHSA-67mh-4wv8-2f99.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
esbuild@0.21.5
0.25.0

Open the chart page →

14,100
workadventureworkadventure1.1.04 of 9See more

workadventure workadventure 1.1.0

4 of the 9 container images this version deploys carry GHSA-67mh-4wv8-2f99.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
esbuild@0.18.20
0.25.0
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
esbuild@0.15.18
0.25.0
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
esbuild@0.18.20
0.25.0
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
esbuild@0.18.20
0.25.0

Open the chart page →

16,083

Container images carrying it

55 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
rcdelacruz/my-strapi-app:js-amd6438007f358355
esbuild@0.16.17
0.25.0
3
outlinewiki/outline:0.69.1d060dcd8f9aa
esbuild@0.16.17
0.25.0
2
rajnandan1/kener:3.2.1930407afca731
esbuild@0.18.20
0.25.0
2
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
esbuild@0.23.1
0.25.0
1
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
esbuild@0.21.5
0.25.0
1
chainsafe/lodestar:latest5593f6e97912
esbuild@0.24.2
0.25.0
1
chainsafe/lodestar:v1.27.07b9fe4aa8073
esbuild@0.21.5
0.25.0
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
esbuild@0.19.12
0.25.0
1
countly/api:25.05.4f4cc7447c4f5
esbuild@0.16.17
0.25.0
1
countly/countly-server:25.05.4e3c238248f99
esbuild@0.16.17
0.25.0
1
countly/frontend:25.05.42acbc11499b6
esbuild@0.16.17
0.25.0
1
directus/directus:11.1.0e3c8bb975350
esbuild@0.18.20
0.25.0
1
documenso/documenso:v1.8.17f16a9449f18
esbuild@0.18.20
0.25.0
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
esbuild@0.15.18
0.25.0
1
felipecs8/conversor-temperatura:v1f945423be36d
esbuild@0.21.5
0.25.0
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
esbuild@0.18.20
0.25.0
1
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
esbuild@0.18.20
0.25.0
1
langgenius/dify-web:1.0.0d64914ff0d6d
esbuild@0.23.1
0.25.0
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
esbuild@0.19.11
0.25.0
1
opea/codegen-ui:1.02bee4eb66f3e
esbuild@0.18.20
0.25.0
1
opea/codetrans-ui:1.03ef121f34610
esbuild@0.21.5
0.25.0
1
opea/docsum-ui:1.07f854e9bffaf
esbuild@0.21.5
0.25.0
1
openbas/caldera-server:5.1.0a277796d9724
esbuild@0.14.38
0.25.0
1
openmined/syft-frontend:0.9.5d11524a3854a
esbuild@0.18.13
0.25.0
1
outlinewiki/outline:0.82.0494dfb9249a6
esbuild@0.21.5
0.25.0
1
supabase/studio:20241021-9f9b08326d8070c55e9
esbuild@0.18.20
0.25.0
1
thecodingmachine/workadventure-back:v1.17.764001369dad5
esbuild@0.18.20
0.25.0
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
esbuild@0.15.18
0.25.0
1
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
esbuild@0.18.20
0.25.0
1
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
esbuild@0.18.20
0.25.0
1
thmmniii/fbs-qcm-frontend:v1.27.1a347f7f4d144
esbuild@0.21.5
0.25.0
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
esbuild@0.21.5
0.25.0
1
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
esbuild@0.21.5
0.25.0
1
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
esbuild@0.23.1
0.25.0
1
ghcr.io/ajnart/homarr:lateste103abadfb52
esbuild@0.23.1
0.25.0
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
esbuild@0.19.12
0.25.0
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
esbuild@0.11.23
0.25.0
1
ghcr.io/caninehq/canine:latesta058034ca006
esbuild@0.24.0
0.25.0
1
ghcr.io/erpc/erpc:0.0.49f5654f745d4c
esbuild@0.24.0
0.25.0
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
esbuild@0.19.12
0.25.0
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
esbuild@0.24.2
0.25.0
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
esbuild@0.21.5
0.25.0
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
esbuild@0.18.20
0.25.0
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
esbuild@0.18.20
0.25.0
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
esbuild@0.19.12
0.25.0
1
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
esbuild@0.21.5
0.25.0
1
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
esbuild@0.18.20
0.25.0
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
esbuild@0.18.20
0.25.0
1
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
esbuild@0.18.20
0.25.0
1
ghcr.io/tale/headplane:0.5.50dbc52cffc19
esbuild@0.24.2
0.25.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.